Skip to main content
POST
Mint an end-user token

Authorizations

Authorization
string
header
required

Locus Pro dashboard session (Cognito).

Path Parameters

externalUserId
string
required

Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

Required string length: 1 - 200
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,199}$

Body

application/json
expiresIn
integer
default:3600
Required range: 60 <= x <= 3600
sessionId
string

High-entropy binding value. The JWT stores only its SHA-256 fingerprint; send the raw value as X-Locus-Session-Id.

Required string length: 16 - 128
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:-]{15,127}$

Response

Token

success
any
required
token
string
required
expiresAt
string<date-time>
required
expiresIn
integer
required
Required range: 60 <= x <= 3600
tokenId
string<uuid>
required
externalUserId
string
required

Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

Required string length: 1 - 200
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,199}$