Switch Organization

POST /auth/organizations/switch

Sign in to another of your organizations without signing in again.

The pair it returns is anchored at your membership of that organization, with that membership’s role, which is not necessarily the one you have here. The refresh cookie is replaced the way a sign-in replaces it.

404 when you hold no active seat in that organization. That is also the answer when the organization does not exist, and when the account at your address inside it belongs to somebody else: telling those apart would answer questions about other people’s accounts.

Role floor

Requires viewer or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Request body — SwitchOrganizationRequest

Field	Type		Notes
organization_id	string (uuid)	required	—

Responses

Status	Description	Body
200	Successful Response	TokenPair
422	Validation Error	HTTPValidationError

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

The body shows the fields the schema always carries. Which combination is legal is a service rule the schema cannot express, so read the description above before copying this.

curl -X POST https://your-deployment.example.com/auth/organizations/switch \
  -H "Authorization: Bearer $COBRE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
       "organization_id": "0190a2f4-0000-7000-8000-000000000000"
     }'

Response — TokenPair

Field	Type		Notes
access_token	string	required	—
refresh_token	string	required	—
token_type	string	optional	Default "bearer".
expires_in	integer	required	—
principal	PrincipalView	required	—