/api/session/cast-links/{key}
Describe a cast link and what a claim still needs
/api/session/cast-links/{key}/claims
202 once the session request is accepted. An accepted anonymous claim returns the minted identity's JWT as ``session_token`` with a ``/#/connect/cast/...`` ``connect_url`` the browser follows to log in and open the session; a browser claim additionally receives the same JWT as the ``session_token`` cookie. An API key holding ``USERS_AUTH_SESSION`` gets the body credential only; no second token is minted. The response is never cached.
/api/admin/session/cast-links
List cast links
/api/admin/session/cast-links
Create a cast link
/api/admin/session/cast-links/{cast_link_id}
Get a cast link
/api/admin/session/cast-links/{cast_link_id}
Partial update. A field omitted from the body is left unchanged. A field sent as null is cleared if the request schema marks it nullable; null on any other field is rejected with 422.
/api/admin/session/cast-links/{cast_link_id}
Delete a cast link
/api/admin/session/cast-links/{cast_link_id}/key-rotations
The previous key stops working immediately; claims presenting it are refused.
/api/admin/session/cast-links/{cast_link_id}/claims
List the claims made against a cast link