diff --git a/selfservice/flow/login/handler.go b/selfservice/flow/login/handler.go index b33b8b3c5c21..355b20fcc5c4 100644 --- a/selfservice/flow/login/handler.go +++ b/selfservice/flow/login/handler.go @@ -476,7 +476,7 @@ type submitSelfServiceLoginFlowBody struct{} // // API flows expect `application/json` to be sent in the body and responds with // - HTTP 200 and a application/json body with the session token on success; -// - HTTP 303 redirect to a fresh login flow if the original flow expired with the appropriate error messages set; +// - HTTP 410 if the original flow expired with the appropriate error messages set and optionally a `use_flow_id` parameter in the body; // - HTTP 400 on form validation errors. // // Browser flows expect a Content-Type of `application/x-www-form-urlencoded` or `application/json` to be sent in the body and respond with diff --git a/selfservice/flow/registration/handler.go b/selfservice/flow/registration/handler.go index dae85ac0b03c..5554dd217a96 100644 --- a/selfservice/flow/registration/handler.go +++ b/selfservice/flow/registration/handler.go @@ -375,7 +375,7 @@ type submitSelfServiceRegistrationFlowBody struct{} // API flows expect `application/json` to be sent in the body and respond with // - HTTP 200 and a application/json body with the created identity success - if the session hook is configured the // `session` and `session_token` will also be included; -// - HTTP 303 redirect to a fresh registration flow if the original flow expired with the appropriate error messages set; +// - HTTP 410 if the original flow expired with the appropriate error messages set and optionally a `use_flow_id` parameter in the body; // - HTTP 400 on form validation errors. // // Browser flows expect a Content-Type of `application/x-www-form-urlencoded` or `application/json` to be sent in the body and respond with