Skip to main content
POST
Exchange a cookie session for raw Supabase tokens

Authorizations

mnemom_session
string
cookie
required

HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".

Response

Tokens returned.

access_token
string
required

Supabase JWT.

refresh_token
string
required
expires_in
integer
required

Seconds until access_token expires.

user_id
string<uuid>
required
user_email
string<email> | null