access

POST `/v1/access/impersonation/redeem`

Exchange a single-use impersonation ticket for a session token.

Autentifikatsiya

Bu oxirgi nuqta ochiq. U hech qanday ma'lumotnoma va tashkilotni talab qilmaydi — bu bizning o'z marketing saytimiz va sun'iy intellekt javob mexanizmlari o'qiydigan narsadir.

Bu yakuniy nuqta hech qanday tashkilot identifikatorini qabul qilmaydi. Sizning kalitingiz unga tegishli tashkilotni allaqachon aniqlaydi va javob shunga qarab cheklanadi.

Sinab ko'rish

Qavslardagi har qanday narsani o'z qiymatlaringiz bilan, kalit pleysxolderini эsa boshqaruv panelingizdagi kalit bilan almashtiring.

curl -X POST https://api.zinndigital.com/v1/access/impersonation/redeem \
  -H "Content-Type: application/json" \
  -d '{ "ticket": <string> }'

Tizimga kirganmisiz? Boshqaruv panelingizdagi API konsoli haqiqiy tashkilot ID raqamingiz va shaxsiy kalitingizni avtomatik to'ldiradi hamda haqiqiy javobni ko'rishingiz uchun so'rovni jonli API orqali bajaradi. Ushbu yakuniy nuqtani API konsolida oching

Tafsilotlar

Called by the customer dashboard when a staff member follows an `ImpersonationGrant.url`. **Unauthenticated by design** — the caller is the app at the instant it has no session, which is the whole point. Authorisation is the ticket: single-use, five minutes, 32 bytes of entropy, stored only as a SHA-256 digest, and bound to a grant a staff member is on the audit log for opening. Every refusal returns the same 401 message. Distinguishing "no such ticket" from "already redeemed" from "expired" would tell a caller which of their guesses was once real.

Soʻrov tanasi

Nomi	Turi	Majburiy	Nima bu
`ticket`	`string`	Ha	—

Javob

Nomi	Turi	Majburiy	Nima bu
`token`	`string`	Ha	The customer session bearer token (carries the staff `act` claim).
`expires_at`	`string`	Ha	—
`session_id`	`string`	Ha	—
`org_id`	`string`	Ha	The single org this grant is good for.
`org_name`	`string`	Ha	—
`actor`	`string`	Ha	The real staff actor (`user:<id>`), for the banner.

Ushbu yakuniy nuqta qaytarishi mumkin bo'lgan xatolar

401 · 422 · 429 · 503

POST /v1/access/impersonation/redeem