GET admin/session/bootstrap

Anonymous-allowed identity probe for the MUI app boot. The route has no me segment, so OAuthSecurityManager requires no scope: a guest reaches here via the public web client (User.Identity.Name empty → IsAuthenticated:false), an authenticated user via their Bearer token (User.Identity.Name = member id). An EXPIRED bearer token still 403s at the gateway (GetPrincipalFromAccessToken fails and the client sends no Basic header alongside the Bearer), so the client's existing refresh/logout flow handles expiry — this endpoint only ever sees a clean guest or a valid user. Cheap (no school layout): the MUI calls it once on boot so redux identity is server-validated (RC1), independent of which network the URL resolves to (RC2).

Response Information

No documentation available.

Response body formats

{
  "isDone": true,
  "code": 0,
  "message": "sample string 2",
  "data": {},
  "cachedKey": "sample string 4",
  "correlationId": "6f73247c-bd08-4a68-9161-f74f60f0a7e3",
  "jwtTokenForSPA": "sample string 6",
  "jwtTokenIndexForSPA": 1
}

<ResultOutVO xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/imLeagues.Internal.API.VO.Output.Common">
  <CachedKey>sample string 4</CachedKey>
  <Code>None</Code>
  <CorrelationId>6f73247c-bd08-4a68-9161-f74f60f0a7e3</CorrelationId>
  <Data />
  <IsDone>true</IsDone>
  <JwtTokenForSPA>sample string 6</JwtTokenForSPA>
  <JwtTokenIndexForSPA>1</JwtTokenIndexForSPA>
  <Message>sample string 2</Message>
</ResultOutVO>