Mint a short chat bearer

POST

/chat-session/bearer

curl --request POST \
  --url https://auth.example.invalid/chat-session/bearer \
  --header 'Content-Type: application/json' \
  --data '{ "idpToken": "example", "actor": "example", "holderProof": "example" }'

• Replace with the configured HTTPS public authority URL; TLS terminates at the operator proxy.

Fresh JSON IdP proof derives owner. Body is closed; unknown or missing fields are 400 before proof verification. Requires holderProof; bearer expires at the least of 900 seconds, IdP proof expiry and session expiry. Origin is refused. Effect failures preserve native code and outcome; missing native outcome means unknown. Retain the same holder on an uncertain retry. Credential verification and native dispatch failures share the public peer refusal budget.

Request Body^required

UTF-8 JSON; maximum 65536 bytes. An Authorization header does not replace the JSON proof.

Media typeapplication/json

object

idpToken

required

string

>= 1 characters

actor

required

string

holderProof

required

string

Example^generated

{
  "idpToken": "example",
  "actor": "example",
  "holderProof": "example"
}

Responses

200

Successful response.

Media typeapplication/json

object

token

required

string

>= 1 characters

owner

required

string

>= 1 characters

exp

required

integer

grant

Current issuer-authorized agent grant. Present for a human IdP exchange and absent for a managed-agent secret exchange.

object

scope

required

Array<string>

allowSubscribe

required

Array<string>

allowPublish

required

Array<string>

dmHistory

required

Allowed value: own

Example

{
  "grant": {
    "dmHistory": "own"
  }
}

400

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

401

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

403

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

404

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

405

JSON error. Route guards run before proof evaluation; parser failures are 400 and byte overflow is 413. An unexpected failure is 400 unless a route handles it separately.

Media typeapplication/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

409

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

412

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

413

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

415

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

429

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

500

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

501

Native refusal where code and outcome are supplied by the chat handler. Pre-dispatch method, Origin, media type and shape refusals are not-executed. Native outcome may be not-executed, executed or unknown. JSON parse/size errors and public admission/deadline errors have only error, without code or outcome.

Media typeapplication/json

One of:

object

object

error

required

string

object

object

error

required

string

code

required

string

outcome

required

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}

503

Public admission cap (64 in flight), 10 second request deadline, or a route-specific unavailable read/effect. A service authority 503 may follow a binding; retain the request identity.

Media typeapplication/json

object

error

required

string

code

string

outcome

string

Allowed values: not-executed executed unknown

Example

{
  "outcome": "not-executed"
}