Exchange Web Session Ticket
curl --request GET \
--url https://api.studio.prisme.ai/v2/user/webSession \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/user/webSession', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/user/webSession"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"error": "BadParameters",
"message": "<string>",
"details": "<unknown>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ForbiddenError",
"message": "Forbidden"
}API Gateway
Exchange Web Session Ticket
Opened in the system browser. Validates and consumes a ticket issued by POST /v2/user/webSessionTicket, sets the session cookie and redirects to the platform URL the ticket was minted with. Single use: a replayed or expired ticket is refused and no cookie is set.
Refused, without ever touching the cookie, when the browser already holds a session belonging to another account: the URL is a plain GET, so it may never sign somebody into an account they did not choose. Anonymous sessions are replaced.
GET
/
v2
/
user
/
webSession
Exchange Web Session Ticket
curl --request GET \
--url https://api.studio.prisme.ai/v2/user/webSession \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/user/webSession', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/user/webSession"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"error": "BadParameters",
"message": "<string>",
"details": "<unknown>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ForbiddenError",
"message": "Forbidden"
}Authorizations
BearerAuthOrgApiKeyAuthBearerAuth & OrgApiKeyAuth
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
The ticket to exchange
Response
Session opened, redirecting to the requested page
Was this page helpful?