Chelabase
Login apiLogin

Get Studio Config

GET
/auth/v1/studio-config

Studio's runtime config: the API URL and Studio's host. Public; cacheable for 60 s.

Response Body

application/json

curl -X GET "https://example.com/auth/v1/studio-config"
{  "apiUrl": "string",  "studioHost": "string"}

Sign Up POST

Creates an account: the fresh-install admin with the setup code, otherwise a person waiting for an admin's approval. With email verification off it signs them in, so the answer is `studio` (the session cookie) or `pending` (no cookie). With it on, `verify` and the HttpOnly step cookie that the code step reads.

Mint Member Token POST

Mints a member access token from the HttpOnly session cookie, after checking that the identity session is live and younger than 30 days and that the membership is active. Takes no body. Studio must send `Origin` and `X-Chelabase-Studio: 1`. Never cached.