Authentication

Create a single sign-on token

POST/api/auth/sso

Returns the authenticated user and a new token valid for 24 hours. Requires Redis-backed authentication.

Try it

Name	Type	Description
Authorizationrequired	string	Token returned by POST /api/auth/login, or an API key (`umami_…`) created under Settings → API keys (self-hosted only). `Bearer <token>`.

200The operation completed successfully.

Name	Type	Description
tokenrequired	string
userrequired	any	User associated with the resource.

200 example

{
  "token": "string",
  "user": {}
}

401Unauthorized.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

401 example

{
  "error": {
    "code": "unauthorized",
    "message": "Unauthorized.",
    "status": 401
  }
}

500Server error.

Name	Type	Description
errorrequired	object	Error details returned when the operation fails.

500 example

{
  "error": {
    "code": "server-error",
    "message": "Server error.",
    "status": 500
  }
}

cURL

curl -X POST 'https://api.example.com/api/auth/sso' \
  -H 'Authorization: Bearer <token>'