StudioHomepage
ServicesScanDALHTTP APIBrowser

Authenticate a browser

POST
/browser

Verify the bearer capability and the Origin against the application's registered origins carried in its signed claims. Set a host-only partitioned cookie with Secure, HttpOnly, SameSite=None and Path=/. The cookie expires with the capability. Send credentials with the request, then verify cookie return before reading data.

Authorization

bearerAuth
headerAuthorizationBearer <token>

Response Body

Browser authentication established.

application/json
  1. response
expiresAt*integer

Expiry in Unix seconds.

curl -X POST 'https://scandal.spiraldb.dev/browser'
{  "expiresAt": 0}