Init a new experience interaction with the given interaction type. Any existing interaction data will be cleared. When the login prompt carries a step-up authentication context (an authenticated session that does not satisfy the requested acr_values), the interaction pins the session subject. If the session already satisfies the class the step-up pursues and the request forces no fresh authentication, the interaction is finished with the session's context untouched and a redirect URL is returned. If the pinned user has no method that can reach that class, the interaction is finished with unmet_authentication_requirements and a redirect URL is returned instead.
Responses
-
The step-up interaction was finished without UI and a redirect URL is returned. Either the session already satisfies the class the step-up pursues, so
acr,amr, andauth_timestay as recorded, or the pinned user has no method that can reach it and the request is answered withunmet_authentication_requirements; followredirectToto return to the application. -
A new experience interaction has been successfully initiated.
-
A step-up interaction was requested with a non-sign-in event, or the session has no subject to pin.
-
The pinned subject of the step-up interaction no longer exists.
-
The captcha verification failed.
curl \
--request PUT 'https://[tenant_id].logto.app/api/experience' \
--header "Content-Type: application/json" \
--data '{
"interactionEvent": "SignIn",
"captchaToken": "string"
}'
{
"interactionEvent": "SignIn",
"captchaToken": "string"
}
{
"redirectTo": "string"
}