Exchange a legacy browser session
POST
Replaces a bearer session token with a secure browser cookie session.
Access: Bearer user session and Layerbeat browser origin. API keys are not supported.
- The original token is revoked. Cookie-only requests cannot use this exchange.
bearerAuthheader
AuthorizationBearer <token>Send Authorization: Bearer <token>. A token is an API key (lb_live_…, scoped, for programs) or a session (lb_sess_…, from signup or login, for people). See Authentication above.
Signed in
application/json- response
user*org_id*stringYour organization.
session*curl -X POST 'https://layerbeat.com/v1/auth/browser/exchange'{ "user": { "id": "usr_k3ndb7vq2xw6y4mt9rf8hz5pae", "email": "you@example.com" }, "org_id": "org_5hxk2m7p4wq3z6tfjn8r9bcdva", "session": { "expires_at": "2026-10-08T10:00:00Z" }}