Switch Current Workspace
POST /api/v1/auth/workspaceRotate a confirmed-MFA provider session into an active customer workspace, or return to provider scope with organizationId=null. Requires recent authentication, CSRF, X-EyesOnIt-Session-Id and If-Match matching the current workspaceRevision. Old session credentials, media tickets and socket authorization are revoked. The original session expiry is preserved.
Access
Section titled “Access”Authentication options declared in the contract include user cookie session or bearer service token.
Use a user cookie session for this account operation.
Authentication and permissions explains tokens, cookies, CSRF, and workspace context.
Parameters
Section titled “Parameters”| Name | Location | Required | Type | Description and constraints |
|---|---|---|---|---|
If-Match |
header | Yes | integer | minimum 0 |
X-EyesOnIt-Session-Id |
header | No | string (uuid) | The sessionId the caller expects. Required when switching workspaces and for cookie requests after workspace rotation. A mismatched value returns 409 with X-EyesOnIt-Workspace-Changed: 1. Bootstrap with getCurrentPrincipal; never replay a mutation automatically after changing context. Bearer clients do not use this header. |
X-CSRF-Token |
header | No | string | Required for unsafe requests authenticated by CookieSession; ignored for bearer clients. minimum length 32. maximum length 256 |
Request body
Section titled “Request body”Required.
application/json — SwitchWorkspaceBody.
| Field | Type | Required | Description and constraints |
|---|---|---|---|
organizationId |
string (uuid) or null | Yes |
cURL request template
Section titled “cURL request template”Set the connection variables described in Get started. Replace each additional EOI_… variable with the parameter value for this request. Prepare the body file using the request schema above. This template sends the request when run.
curl --fail-with-body --silent --show-error \ --request POST \ --cookie "${EOI_COOKIE_JAR}" \ --header "X-EyesOnIt-Session-Id: ${EOI_SESSION_ID}" \ --header "X-CSRF-Token: ${EOI_CSRF_TOKEN}" \ --cookie-jar "${EOI_COOKIE_JAR}" \ --header "If-Match: ${EOI_IF_MATCH}" \ --header "Content-Type: application/json" \ --data-binary @request.json \ "${EOI_API_BASE_URL}/auth/workspace"Contract responses
Section titled “Contract responses”The table records responses declared by the OpenAPI contract. See Errors and status codes for the runtime error envelope and shared failures.
| Status | Description | Media type | Body |
|---|---|---|---|
| 200 | Successful Response | application/json |
SessionLoginResponse |
| 422 | Validation Error | application/json |
HTTPValidationError |
Operation identifier switchCurrentWorkspace. Browse Authentication and sessions.
