Mint Login Ticket

POST

https://api.lootlocker.io/admin/v1/login/ticket

Mints a single-use login ticket for the current session. The website exchanges it via POST /admin/v1/session/ticket so the user can be handed into the console across subdomains without a session token ever appearing in a URL.

The ticket is not a session: it is single-use, bound to the user server-side, and expires after 60 seconds.

Request

Header Params

Responses

🟢200Success

application/json

Single-use login ticket (valid for 60 seconds).

Bodyapplication/json

🟠401Unauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.lootlocker.io/admin/v1/login/ticket' \
--header 'x-auth-token: ' \
--header 'Content-type: application/json'

Response Example

200 - Example 1

{
    "ticket": "string"
}

Modified at 2026-09-23 13:50:10

Logout

Exchange Login Ticket