latestOpenAPI 3.0.1Proprietary2026-08-1844131294.9 KB

59cd6443fdbf

Magic Links

Generate Authorization Code for Customer User

Generates an authorization code for a customer user using a platform JWT token.

This endpoint extracts the platform user ID directly from the JWT token's claims (details.id field) and generates a short-lived auth code.

Unlike /authenticate/partner/request-authcode, this endpoint:

  • Does NOT require a customerUserId in the request body
  • Accepts only platform JWT tokens (not client auth tokens)
  • Extracts platformUserId from the JWT token's "details.id" claim

Security considerations:

  • Requires valid Bearer token (platform JWT) in Authorization header
  • Auth code is short-lived (typically 60 seconds)
  • Auth code can only be used once

Authentication:

  • Requires Bearer token (platform JWT) in Authorization header
post/authenticate/partner/request-customer-authcode

Headers

Authorizationobject required

Bearer token (platform JWT) for authentication

Response

Auth code generated successfully

auth_codestring required

The generated authorization code

expires_ininteger required

Auth code expiration time in seconds

customer_user_idstring

The customer user ID (UUID). Included when a user was auto-provisioned.

Example response

{
  "auth_code": "abc123def456",
  "expires_in": 60,
  "customer_user_id": "759a086f-48b3-4e34-aefd-00c8a9e68523"
}