Verify external auth assertion for elevated access token

Accepts a customer-signed assertion JWT and returns an elevated access token for step-up authentication. The assertion JWT must be signed with the same key registered in the environment’s external auth JWKS URL.

POST /sdk/{environmentId}/externalAuth/verify

Verify external auth assertion for elevated access token

cURL

curl --request POST \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/externalAuth/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "jwt": "jwt_value",
  "sessionPublicKey": "An example name"
}
'

200

{
  "elevatedAccessToken": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

environmentId · string · required

ID of the environment

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Body

application/json

jwt · string

Encoded JWT token. This will only be returned when cookie-based authentication is disabled in favor of standard Auth header based authentication.

Example:

"jwt_value"

sessionPublicKey · string

Pattern: ^(?=\S)[\p{L}\p{N}a-zA-Z _.,:!?&%@\/+\-'|]+(?<=\S)$

Example:

"An example name"

Response

200

application/json

Success

elevatedAccessToken · string · required

Elevated access token for step-up authentication