app.tempomusic.gateway.createSession
Exchange a PDS-minted service auth token for a gateway session. The service auth JWT travels in the Authorization header (aud = the gateway DID, lxm = this NSID) and is single-use. Browser callers (Origin header present) receive the session as an HttpOnly cookie and no sessionToken is returned.
Details · procedure
| Kind | procedure |
|---|---|
| Authority | gateway.tempomusic.app |
| Indexed |
Procedure
procedure · POSTInput
application/jsonClient platform requesting the session. Web always receives cookie mode; other platforms receive token mode unless the request carries an Origin header.
maxLength: 100knownValues: android | ios | desktop | web
Output
application/jsonsessionToken
stringOpaque session token (token mode only). Absent in cookie mode.
maxLength: 8192
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
at.blueharbor.createSession
procedureThe lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.