Exchange a service token for an app token
GET/api/auth/token/:accountShortGuid
Validates the service token from the Authorization header against the specified account, then issues a new JWT app token and refresh token pair. The service token must be active and associated with the given account. Requires the service role.
Request
Responses
- 200
- 401
- 403
- 404
- 500
Returns the JWT app token and refresh token.
Authentication failed — the service token is missing, invalid, or inactive.
The caller's IP address is not permitted to access this account.
The account or service token was not found.
An unexpected server error occurred.