Lexicon Garden

com.atproto.server.createSession

Create an authentication session.

Repository @atproto-lexicons.bsky.social did:plc:6msi3pj7krzih5qxqtryxlzw namespace authority
Details · procedure
Kindprocedure
Authorityserver.atproto.com
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

allowTakendown

boolean

When true, instead of throwing error for takendown accounts, a valid response with a narrow scoped token will be returned

identifier

requiredstring

Handle or other identifier supported by the server for the authenticating user.

password

requiredstring

Output

application/json

accessJwt

requiredstring

active

boolean

did

requiredstring · did

didDoc

unknown

email

string

handle

requiredstring · handle

refreshJwt

requiredstring

status

string

If active=false, this optional field indicates a possible reason for why the account is not active. If active=false and no status is supplied, then the host makes no claim for why the repository is no longer being hosted.

  • knownValues: takendown | suspended | deactivated

Errors

AccountTakedown

No description in schema.

AuthFactorTokenRequired

No description in schema.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • com.atproto.server.refreshSession

    procedure

    Refresh an authentication session. Requires auth using the 'refreshJwt' (not the 'accessJwt').

  • com.atproto.server.getSession

    query

    Get information about the current auth session. Requires auth.

  • ai.newnal.pdn.server.createAttestedAccount

    procedure not from the namespace authority

    Create an account on behalf of a client attested by a trusted issuer. Authenticated with a service-auth JWT (iss = trusted issuer DID, aud = this PDN, lxm = this method, exp - iat <= 60 s, unique jti). No invite code, no captcha. Without handle the server generates a memorable one; without email the server stores the placeholder <label>@newnal.id. Returns a full session, like createAccount; clients that need a scoped session create a scoped app password with it.

  • social.dept.createSession

    procedure not from the namespace authority

    Start a Social Dept. session for the account that signed the service auth token sent as the bearer credential. The token's lxm must be this method.

  • at.blueharbor.createSession

    procedure

    The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.