Tearleads

POST/auth/ws-ticket

Mint a one-time WebSocket ticket

Operation auth.webSocketTicket

Description

Issues a single-use, short-lived ticket that authenticates one WebSocket upgrade to the realtime hint gateway, because browsers cannot attach an Authorization header to a WebSocket handshake. Clients call it before each reconnect; sign-in already returns the first ticket.

Authentication

Requires a signed-in session: the client sends its session token as a bearer token in the Authorization header.

Responses

200 OK

application/jsonWebSocketTicketResponse

A single-use ticket for one WebSocket connection to the realtime hint gateway.

1 field
  • ticketstringrequired

    Opaque ticket, passed in the WebSocket upgrade URL and deleted on first use.

Other fields are allowed.

Other responses

StatusMeaningBody
401Unauthorized

application/jsonSessionFailureResponse

500Internal Server Error

application/jsonErrorResponse

503Service Unavailable

application/jsonErrorResponse