Desktop app auth / Token exchange

Step 2 of the desktop auth flow. The desktop app POSTs the one-time code received via the custom URI callback. Returns the JWT on success and immediately invalidates the code. No authentication required — the code itself is the proof of prior login.

Route: /api/sys/v{version:apiVersion}/desktop_app_auth/token_exchange

Method: POST

Authorisation: No authentication needed

Response object

Response status: 200 (OK)

Response type: String

Wrapper: DTO_response_wrap

Other response statuses: 400 (BadRequest), 429 (TooManyRequests), 500 (InternalServerError)

  Response body example