Mint an embed session

POST/embed/sessions

For a partner server authenticated with an organisation API key (tlak_). Mints a short-lived token pinned to one account of the key's organisation, carrying a subset of the key's scopes, for an embedded Backstage widget. User tokens and embed tokens are refused.

Request Body

accountId*stringAccount the session is pinned to (must belong to the key's organisation)

scopesstring[]Subset of the API key's scopes (defaults to all of them)

ttlSecondsintegerLifetime in seconds (default 900, max 3600)

Response

Embed session minted

Code Samples

No code examples available for this operation.

Try It

Request Body

accountId*Account the session is pinned to (must belong to the key's organisation)

scopes[ "events.read", "orders.read" ]Subset of the API key's scopes (defaults to all of them)

ttlSecondsLifetime in seconds (default 900, max 3600)