Redeem a one-time sign-in code
POST/v1/auth/handoff/redeem
Answers the session the code carries. A code works once. A used or expired code is refused the same way. Attempts are rate limited.
No token is needed.
Request
Responses
- 200
- 400
- 404
- 413
- 415
- 422
- 429
- default
OK
Bad Request.
invalid_request: The body is not a single JSON object, names a field this operation does not take, or gives a value of the wrong type.
Not Found.
not_found: The code is unknown, malformed, already used or expired. All of these read the same.
Request Entity Too Large.
body_too_large: The body is larger than the service accepts.
Unsupported Media Type.
unsupported_media_type: The body is not sent as application/json.
Unprocessable Entity.
validation_failed: code is missing.
Too Many Requests.
rate_limited: More than 10 sign-in, scope or code attempts came from this address in the last minute.
An error, as an RFC 7807 problem document.