Create a one-time sign-in code
POST/v1/auth/handoff
For a portal that holds the user's token. The code carries the caller's own session and nothing more. A browser redeems it once to be signed in without a password. It expires after a minute.
Any valid token.
Responses
- 201
- 401
- default
Created
Unauthorized.
unauthenticated: The token is missing, expired or not valid.
An error, as an RFC 7807 problem document.