Create a tenant discovery grant.

POST

/api/auth/discovery/grant

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/auth/discovery/grant \
  --header 'Content-Type: application/json' \
  --data '{ "tenant_id": "tenant_123", "return_to": "https://app.example.com/" }'

Issues a short-lived signed grant that allows the Login UI to continue from common discovery to the selected tenant login surface.

Request Body ^required

Media type application/json

object

tenant_id

required

string

expected_tenant_id

string

return_to

string format: uri

login_hint

string

<= 320 characters

Example

{
  "tenant_id": "tenant_123",
  "return_to": "https://app.example.com/"
}

Responses

200

Successful JSON response.

Media type application/json

object

grant

required

string

login_url

required

string format: uri

expires_in

required

integer

Example

{
  "grant": "eyJhbGciOiJIUzI1NiJ9...",
  "login_url": "https://acme.auth.example.com/login?discovery_grant=...",
  "expires_in": 300
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}