Skip to main content
POST
Start a single sign-on session

Authorizations

Authorization
string
header
required

Pass your API key as: Authorization: Bearer <API KEY>.

User-Agent
string
header
default:BosscartDocs/1.0
required

Client identifier sent with requests from the documentation playground.

Body

application/json
email
string<email>
required
Example:

"john@doe.com"

path
string

Optional. Direct the member to a specific page after sign-on.

Example:

"/protected-member-only-page"

Response

200 - application/json

A session token and access URL.

token
string
Example:

"xxxxx.xxxxx.xxxxx"

accessUrl
string<uri>

Redirect the member here. Valid for 15 minutes.

Example:

"https://your-domain/api/site/members/session/xxxxx.xxxxx.xxxxx"

createdAt
integer<int64>
Example:

1605283421

expiresAt
integer<int64>
Example:

1605284321

Last modified on September 2, 2026