Skip to main content

Mint Visitor Session

POST 

/v1/widgets/:widget_id/sessions

Mint a visitor session JWT. Idempotent on (tenant_id, external_user_id).

Auth (client-facing): tenant-backend OAuth2 access token in Authorization: Bearer <jwt> with scope widget_sessions:write. The gateway validates the token; the service trusts the stamped headers downstream.

Request

Responses

Successful Response