operator.mint_oidc_session

Mint an operator session for an email the admin server already verified via Google OIDC. Never provisions.

• Scope: operator.session.mint
• System: no
• Reachable from: POST /v1/commands/operator.mint_oidc_session (tenant credential) · MCP tool operator.mint_oidc_session · SDK client.call('operator.mint_oidc_session', …)
• Events: admin_user.activated

Input (JSON Schema)

{
  "properties": {
    "email": {
      "format": "email",
      "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
      "type": "string"
    },
    "factor_assertion": {
      "type": "string"
    },
    "name": {
      "type": "string"
    }
  },
  "required": [
    "email"
  ],
  "type": "object"
}

Result (200)

{
  "additionalProperties": false,
  "properties": {
    "admin_user_id": {
      "type": "string"
    },
    "expires_at": {
      "type": "string"
    },
    "token": {
      "type": "string"
    }
  },
  "required": [
    "admin_user_id",
    "token",
    "expires_at"
  ],
  "type": "object"
}

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)