Authenticate your external application using a session token and an extension secret

POST/authenticate-session-token/

API version

v2

Request method

POST

Operation ID

extension-authenticate-with-session-token

---

Request

Responses

Format

application/json

Description

You received a public token with a short expiry. You can now perform domain actions.

Schema documentation

• expirystring (date-time)

  required
• publicTokenstring

  required

  Set this in the 'x-access-token' header when performing domain actions.

Example

{
  "expiry": "2025-04-07T22:34:33.508Z",
  "publicToken": "string"
}

JSON Schema

{
  "properties": {
    "expiry": {
      "format": "date-time",
      "type": "string"
    },
    "publicToken": {
      "description": "Set this in the 'x-access-token' header when performing domain actions.",
      "type": "string"
    }
  },
  "required": [
    "publicToken",
    "expiry"
  ],
  "type": "object"
}

Usage examples

cURL

$ curl \
    --fail \
    --location \
    -X POST \
    -d '{"extensionSecret":"string","sessionToken":"string"}' \
    -H "Authorization: Bearer $MITTWALD_API_TOKEN" \
    -H 'Content-Type: application/json' \
    https://api.mittwald.de/v2/authenticate-session-token

JavaScript SDK

import { MittwaldAPIV2Client } from "@mittwald/api-client";
import { assertStatus } from "@mittwald/api-client-commons";
  
const client = MittwaldAPIClient.newWithToken(process.env.MITTWALD_API_TOKEN);
const response = await client.marketplace.extensionAuthenticateWithSessionToken({
  "data": {
    "extensionSecret": "string",
    "sessionToken": "string"
  }
});

assertStatus(response, 201);
  

PHP SDK

use \Mittwald\ApiClient\Generated\V2\Clients\Marketplace\ExtensionAuthenticateWithSessionToken\ExtensionAuthenticateWithSessionTokenRequest;
use \Mittwald\ApiClient\Generated\V2\Clients\Marketplace\ExtensionAuthenticateWithSessionToken\ExtensionAuthenticateWithSessionTokenRequestBody;
  
$client = MittwaldAPIClient::newWithToken(getenv('MITTWALD_API_TOKEN'));

// TODO: Please consult the properties and constructor signature of
// ExtensionAuthenticateWithSessionTokenRequestBody to learn how to construct a valid instance
$body = new ExtensionAuthenticateWithSessionTokenRequestBody(/* TODO: ... */);

$request = (new ExtensionAuthenticateWithSessionTokenRequest(
  body: $body
));
$response = $client->marketplace()->extensionAuthenticateWithSessionToken($request);

var_dump($response->getBody();