app.tempomusic.gateway.createSession

Exchange a PDS-minted service auth token for a gateway session. The service auth JWT travels in the Authorization header (aud = the gateway DID, lxm = this NSID) and is single-use. Browser callers (Origin header present) receive the session as an HttpOnly cookie and no sessionToken is returned.

Details · procedure
Kindprocedure
Authoritygateway.tempomusic.app
Indexed

Procedure

procedure · POST

Input

application/json

platform

requiredstring

Client platform requesting the session. Web always receives cookie mode; other platforms receive token mode unless the request carries an Origin header.

  • maxLength: 100
  • knownValues: android | ios | desktop | web

Output

application/json

Opaque session token (token mode only). Absent in cookie mode.

  • maxLength: 8192

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.