Establish Session
POST/api/v1/auth/session
Trade a fresh client-side Cognito login for a server-side session.
Verifies the posted access token (Cognito GetUser), stores the refresh
token in Redis under a new opaque session id, and sets that id in a host-only
HttpOnly cookie. Returns the access token + lifetime for in-memory use;
the refresh token is never returned to JS.
Request
Responses
- 200
- 422
Successful Response
Validation Error