Desktop sign in
/auth/v1/desktop/sign-inWhen the person signed in, when the platform checked it, how long it counts, and until when it meets the organisation's step-up window.
Authorization
deviceToken A device access token from the device-code flow (aioe_at_…). A DPoP-bound token is sent as Authorization: DPoP <token> with a fresh DPoP proof on every request.
In: header
Response Body
application/json
application/json
curl -X GET "https://example.com/auth/v1/desktop/sign-in"{ "signedIn": false}/auth/v1/desktop/sign-inA desktop presents the person's own sign-in once, beside its device token, and the platform keeps the dated sign-in on the device. That lets it judge a gated action (a peer token for hosts or computer control, adding a folder to a node) against the organisation's step-up window. Send idToken on Enterprise (the access token your identity provider issued for the AIOE API) or sessionToken on Mojo Up AI Cloud (the person's Cloud access token), never both. A gated action without a recent sign-in answers 401 sign_in_again with how: "desktop-sign-in"; sign in again, then call this.
Authorization
deviceToken A device access token from the device-code flow (aioe_at_…). A DPoP-bound token is sent as Authorization: DPoP <token> with a fresh DPoP proof on every request.
In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
curl -X POST "https://example.com/auth/v1/desktop/sign-in" \ -H "Content-Type: application/json" \ -d '{ "idToken": "string" }'{ "signedIn": false}/auth/v1/desktop/sign-inSign out. Answers 204 whether or not there was one.
Authorization
deviceToken A device access token from the device-code flow (aioe_at_…). A DPoP-bound token is sent as Authorization: DPoP <token> with a fresh DPoP proof on every request.
In: header
Response Body
application/json
curl -X DELETE "https://example.com/auth/v1/desktop/sign-in"