POST /internal_api/autodesk_identity/license_renewal
post_internal_api_autodesk_identity_license_renewal
Renews the Autodesk Identity licence lease behind the _session_id cookie: {"message": "OK"} and license.expiresAt moves to now plus one day. 401 without the cookie.
API
The third call in the web app's session checker. A person's browser session on an Autodesk Identity site has two clocks, the site session and the seat licence, and this renews the second.
Params
| part | value |
|---|---|
| path | <site>/internal_api/autodesk_identity/license_renewal |
Cookie |
_session_id=<session token> |
| body | none |
Sample requests
r = requests.post(f"{site}/internal_api/autodesk_identity/license_renewal",
cookies={"_session_id": session_token}, timeout=30)
{"message": "OK"}
GET /internal_api/session read back before and after, on the probed site:
before license {"createdAt": 1788881738, "expiresAt": 1788968138}
after license {"createdAt": 1788889410, "expiresAt": 1788975810} both reset to now
Response codes
| status | when |
|---|---|
| 200 | renewed |
| 401 | no _session_id cookie |
| 404 | GET on this path. JSON:API envelope, code 103 |
Edge cases
- It also moves the session's own
expiresAt, so one call renews both clocks. - Whether a REST bearer can still be minted once
license.expiresAthas passed while the session is alive is not measured. On the probed site the licence lease started at the person's browser login and the session at the approval, so the licence is the one that runs out first. - Only measured on a site whose
user_authentication_methodisoxygen. What it answers on a site without Autodesk Identity is not measured.