Poll device login for token

POST

/v1/auth/device/token

curl --request POST \
  --url https://shareout.site/v1/auth/device/token \
  --header 'Content-Type: application/json' \
  --data '{ "device_code": "example" }'

• Production

Poll with the device_code secret. Returns pending until the browser OAuth step completes, then delivers the so_ token exactly once.

Request Body^required

Media typeapplication/json

object

device_code

required

string

Example^generated

{
  "device_code": "example"
}

Responses

200

Pending or approved

Media typeapplication/json

One of:

object

object

status

required

string

Allowed values: pending

interval

required

integer

object

object

status

required

string

Allowed values: approved

token

required

Bearer token (so_…), shown once.

string

user_id

required

string

warn

Present when expected_email did not match signed-in email.

string

Example

{
  "status": "pending"
}

400

error is the RFC 8628 value (expired_token, access_denied, invalid_grant, invalid_request); code and hint say what happened and what to do next (usually: start a new login).

Media typeapplication/json

object

success

required

boolean

error

required

Human-readable message.

string

code

required

Machine-readable error code.

string

request_id

Correlation id (also the X-Request-Id header). Quote it in support tickets.

string

reason

Finer cause under code. For UNAUTHORIZED: missing, invalid, revoked or expired.

string

hint

What to do next, in plain words.

string

suggestion

string

param

The request field at fault.

string

docs

Doc page for this error.

string

redirect_url

string

support

Present on 5xx — how to reach a human.

object

how

string

include

Array<string>

Example

{
  "success": false,
  "support": {
    "how": "POST /v1/support/tickets",
    "include": [
      "request_id"
    ]
  }
}