Skip to main content
ZStack
Infrastructure/Federation & SSO

OpenSSOSession

Prepare a verified identity and return a passwordless redirect URL. For Anheng, the compatibility JWT is checked locally and never forwarded to AH; builtin admin uses its read-only pre-provisioned identity, platform-admin uses fixed global scope and the shared zcf-global-platform-admins Team, and project-admin supplies X-ZStack-Session to derive exactly one Project. The frontend does not send ProjectID. ZCF trusts the BFF credential pairing and does not introspect Cloud session owner or login scope.

POST/api/v1/federation/platforms/{platformId}/sso/login

Operation ID

OpenSSOSession

Since

1.0.0

Execution Mode

Synchronous

Auth Context

Auth Required

Auth Context

Send these values as request headers when calling this API.

AuthorizationstringRequired

Bearer Token

X-Tenant-IDstring

X-Tenant-ID

Request Inputs

application/json

Path Parameters

  • platformId
    StringRequired

    Target platform UUID — must reference a connected ah_tianchi platform.

Body Fields

  • jwt
    StringRequired

    Compatibility session JWT. Anheng checks its stable subject locally for non-builtin users and does not forward the JWT to AH; Authorization /api/userinfo remains authoritative.

    Example: eyJhbGciOiJSUzI1NiJ9...

Responses

200 OK
200 OK

On success, this API returns the following response structure.

  • ssoUrl
    String

    Passwordless redirect URL on the target platform. Host validated.

    Example: https://172.26.105.251/sso/redirect?token=...

Change History

View all change history

  • Change Time

    AddedRequest parameters X-ZStack-Session
    View API