Skip to main content
POST
Establish or renew an Atoti browser session.

Authorizations

Authorization
string
header
required

An existing browser JWT in the Authorization header as Bearer . API keys and URL tokens are not accepted.

Response

The session was established; returns its UTC expiry and organisation-relative UI path.

Describes the authenticated user's short-lived browser session for their organisation's Atoti UI.

$type
enum<string>
required
Available options:
Derivitec.Web.Core.Atoti.AtotiSessionResponse, Derivitec.Web.Core
expiresAt
string<date-time>

UTC instant when the browser cookie expires, no later than the validated bearer JWT expiry; renew using a current bearer token before this instant.

Example:

"2026-10-08T12:00:00Z"

uiUrl
string | null

Server-resolved relative UI path for the authenticated organisation on the current portal origin, including the trailing slash; never an upstream service URL.

Example:

"/atoti/example-organisation/"