API referenceApplication authentication
Exchange issuer identity and client proof for a gateway token
App Attest clients send key_id, assertion, and challenge. Issuer-backed API-key clients send api_key and issuer_token. The verified issuer claim is always the resulting user identity.
Path Parameters
app*string
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/v1/apps/string/auth/token" \ -H "Content-Type: application/json" \ -d '{ "key_id": "string", "assertion": "string", "challenge": "string" }'{ "access_token": "string", "expires_in": 0}