Skip to main content
ZStack
Identity & Access/ZIAM

ZiamCreateLoginSession

Creates an HttpOnly ziam_session cookie after verifying username/password. Browser OIDC clients provide the short-lived login_request issued by authorize together with its browser-bound ziam_login_tx cookie and receive a canonical continueUrl.

POST/api/login/session

Operation ID

ZiamCreateLoginSession

Since

1.0.0

Execution Mode

Synchronous

Auth Context

Auth Required

Auth Context

Send these values as request headers when calling this API.

AuthorizationstringRequired

Bearer Token

X-Tenant-IDstring

X-Tenant-ID

Request Inputs

This API requires no request parameters.

Responses

200 OK
200 OK

On success, this API returns the following response structure.

  • status
    String

    Status for this resource

    Example: ok

  • data
    Object

    Response payload data

    Example: (nested object)

    • expiresAt
      String

      Browser login session expiry time.

      Example: 2026-06-17T10:00:00Z

    • continueUrl
      String

      Canonical absolute ZIAM authorize URL generated from the validated stored request. It includes a one-time continuation proof that binds the callback to the session created for this login request. The frontend must navigate to this URL unchanged.

      Example: https://ziam.example.com/api/login/oauth/authorize?client_id=ziam-default-client&login_continue=opaque-proof&response_type=code

Change History

View all change history

  • Change Time

    AddedRequest parameters login_requestAddedResponse fields continueUrl
    View API

  • Change Time

    AddedRequest parameters login_requestAddedResponse fields continueUrl
    View API