Issuer's token in, ours out. `?tenant=` picks which membership it acts for.

POST

/console/token

const url = 'https://api.canopyhq.dev/console/token';
const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://api.canopyhq.dev/console/token \
  --header 'Authorization: Bearer <token>'

Authorizations

issuer_token

Parameters

Query Parameters

tenant

string

Which membership the token acts for; the first, absent.

Responses

200

A console token for the tenant named.

application/json

object

expires

required

integer format: int64

name

required

string

role

required

What a user may do in a tenant. An owner consents on its behalf.

string

Allowed values: Owner Member

tenant

required

The organization that consented. Comes from the console’s identity.

string

token

required

string

Example

{
  "role": "Owner"
}

400

The query string did not parse.

401

No issuer token, or one this deployment does not trust.

403

No membership of the user answers this login.