...
This endpoint should throw an UnauthenticatedException if the user is not authenticated. It should return the summary view of studies, sufficient to provide a UI to select a new study, if the user is authenticated.
Alternatively, we could put this in the user’s session.
POST /v3/auth/study
A user can submit a new study to which they wish to bind their session. If the user’s Synapse user ID exists for an account in that study (it should, if they picked the study from the list returned in the prior API), then we recreate their session in the new study and return it in the response. A user’s permissions can be different on a study-by-study basis.
...