Skip to content

Create a Core session for the banking API

POST
/api/v1/auth/login/create_banking_api_session
curl --request POST \
--url https://core.example.com/api/v1/auth/login/create_banking_api_session \
--header 'Content-Type: application/json' \
--header 'app-token: <app-token>' \
--data '{ "user_id": 1, "sign": "example" }'

Internal SSO mechanism. sign is verified as SHA-256 of the user_id, app-token, and a three-minute time window. The implementation concatenates the minute values without separators.

Media typeapplication/json
object
user_id
required
integer
sign
required

SHA-256 signature

string
Examplegenerated
{
"user_id": 1,
"sign": "example"
}

Session created for one day

Media typeapplication/json
object
success
required
boolean
status
required
integer
session_token
required
string
session_expires
required
string
Example
{
"success": true,
"status": 200
}

Invalid credentials or signature

Media typeapplication/json
object
success
required
boolean
status
required
integer
errors
required
One of:
Array<object>
object
code
string
kind
string
nullable
expiration
string
nullable
session
string
nullable
key
additional properties
any
key
additional properties
any
Example
{
"success": false,
"status": 403
}