Auth

Jwks Controller_get Jwks

Path Parameters

appId*string

Response Body

curl -X GET "https://example.com/apps/string/.well-known/jwks.json"

Empty

Auth Settings Controller_get

Path Parameters

appId*string

Response Body

curl -X GET "https://example.com/apps/string/auth-settings"

Empty

Auth Settings Controller_update

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

enabled?boolean

allowedProviders?array<>

redirectUrlAllowlist?array<string>

accessTokenTtlSeconds?number

Range60 <= value

refreshTokenTtlDays?number

Range1 <= value

logoUrl?string

Logo affiché sur les pages hébergées.

primaryColor?string

Couleur principale des pages hébergées, format hex (#2563eb).

customDomain?string

Domaine personnalisé pour les pages hébergées, ex: auth.monapp.com.

organizationsEnabled?boolean

Active la multi-tenance B2B (Organizations) pour cette App.

Response Body

curl -X PATCH "https://example.com/apps/string/auth-settings" \  -H "Content-Type: application/json" \  -d '{}'

Empty

Auth Settings Controller_verify Domain

Path Parameters

appId*string

Response Body

curl -X POST "https://example.com/apps/string/auth-settings/verify-domain"

Empty

Hosted Domains Controller_resolve

Path Parameters

host*string

Response Body

curl -X GET "https://example.com/hosted-domains/string"

Empty

End User Auth Controller_get Hosted Config

Path Parameters

appId*string

Response Body

curl -X GET "https://example.com/apps/string/auth/hosted-config"

Empty

End User Auth Controller_sign Up

Path Parameters

appId*string

Header Parameters

authorization*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

password*string

redirectUri?string

Si fourni (et présent dans l'allowlist), déclenche l'envoi d'un email de confirmation.

Response Body

curl -X POST "https://example.com/apps/string/auth/sign-up" \  -H "authorization: string" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "password": "string"  }'

Empty

End User Auth Controller_sign In

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

password*string

Response Body

curl -X POST "https://example.com/apps/string/auth/sign-in" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "password": "string"  }'

Empty

End User Auth Controller_refresh

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

refreshToken*string

Response Body

curl -X POST "https://example.com/apps/string/auth/refresh" \  -H "Content-Type: application/json" \  -d '{    "refreshToken": "string"  }'

Empty

End User Auth Controller_sign Out

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

refreshToken*string

Response Body

curl -X POST "https://example.com/apps/string/auth/sign-out" \  -H "Content-Type: application/json" \  -d '{    "refreshToken": "string"  }'

Empty

End User Auth Controller_request Magic Link

Path Parameters

appId*string

Header Parameters

authorization*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

redirectUri?string

Obligatoire pour un lien magique ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/magic-link" \  -H "authorization: string" \  -H "Content-Type: application/json" \  -d '{    "email": "string"  }'

Empty

End User Auth Controller_verify Magic Link

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

token*string

Response Body

curl -X POST "https://example.com/apps/string/auth/magic-link/verify" \  -H "Content-Type: application/json" \  -d '{    "token": "string"  }'

Empty

End User Auth Controller_request Otp

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

redirectUri?string

Obligatoire pour un lien magique ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/otp" \  -H "Content-Type: application/json" \  -d '{    "email": "string"  }'

Empty

End User Auth Controller_verify Otp

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

code*string

Response Body

curl -X POST "https://example.com/apps/string/auth/otp/verify" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "code": "string"  }'

Empty

End User Auth Controller_google Callback

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

redirectUri*string

L'exact redirect_uri utilisé par l'app cliente pour obtenir le code ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/google/callback" \  -H "Content-Type: application/json" \  -d '{    "code": "string",    "redirectUri": "string"  }'

Empty

End User Auth Controller_github Callback

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

redirectUri*string

L'exact redirect_uri utilisé par l'app cliente pour obtenir le code ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/github/callback" \  -H "Content-Type: application/json" \  -d '{    "code": "string",    "redirectUri": "string"  }'

Empty

End User Auth Controller_apple Callback

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

redirectUri*string

L'exact redirect_uri utilisé par l'app cliente pour obtenir le code ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/apple/callback" \  -H "Content-Type: application/json" \  -d '{    "code": "string",    "redirectUri": "string"  }'

Empty

End User Auth Controller_forgot Password

Path Parameters

appId*string

Header Parameters

authorization*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

redirectUri*string

Où renvoyer l'end-user une fois reconnecté ; doit figurer dans l'allowlist de redirection de l'App.

Response Body

curl -X POST "https://example.com/apps/string/auth/forgot-password" \  -H "authorization: string" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "redirectUri": "string"  }'

Empty

End User Auth Controller_reset Password

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

token*string

newPassword*string

Response Body

curl -X POST "https://example.com/apps/string/auth/reset-password" \  -H "Content-Type: application/json" \  -d '{    "token": "string",    "newPassword": "string"  }'

Empty

End User Auth Controller_verify Email

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

token*string

Response Body

curl -X POST "https://example.com/apps/string/auth/verify-email" \  -H "Content-Type: application/json" \  -d '{    "token": "string"  }'

Empty

End User Auth Controller_verify Mfa Challenge

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

challengeToken*string

code*string

Code TOTP à 6 chiffres, ou un code de secours à 10 caractères.

Response Body

curl -X POST "https://example.com/apps/string/auth/mfa/verify" \  -H "Content-Type: application/json" \  -d '{    "challengeToken": "string",    "code": "string"  }'

Empty

End User Mfa Controller_enroll

Path Parameters

appId*string

Response Body

curl -X POST "https://example.com/apps/string/auth/mfa/enroll"

Empty

End User Mfa Controller_confirm

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

Code TOTP à 6 chiffres, ou un code de secours à 10 caractères.

Response Body

curl -X POST "https://example.com/apps/string/auth/mfa/confirm" \  -H "Content-Type: application/json" \  -d '{    "code": "string"  }'

Empty

End User Mfa Controller_disable

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

Code TOTP à 6 chiffres, ou un code de secours à 10 caractères.

Response Body

curl -X POST "https://example.com/apps/string/auth/mfa/disable" \  -H "Content-Type: application/json" \  -d '{    "code": "string"  }'

Empty

End User Sessions Controller_list

Path Parameters

appId*string

Response Body

curl -X GET "https://example.com/apps/string/auth/sessions"

Empty

End User Sessions Controller_revoke

Path Parameters

id*string

appId*string

Response Body

curl -X DELETE "https://example.com/apps/string/auth/sessions/string"

Empty

End User Organizations Controller_list Mine

Path Parameters

appId*string

Response Body

curl -X GET "https://example.com/apps/string/auth/organizations/mine"

Empty

End User Organizations Controller_set Active

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

organizationId*string

Response Body

curl -X POST "https://example.com/apps/string/auth/organizations/active" \  -H "Content-Type: application/json" \  -d '{    "organizationId": "string"  }'

Empty

End User Organizations Controller_clear Active

Path Parameters

appId*string

Response Body

curl -X DELETE "https://example.com/apps/string/auth/organizations/active"

Empty

End User Organizations Controller_leave

Path Parameters

organizationId*string

appId*string

Response Body

curl -X DELETE "https://example.com/apps/string/auth/organizations/string/members/me"

Empty

End User Organizations Controller_accept Invitation

Path Parameters

appId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

token*string

Response Body

curl -X POST "https://example.com/apps/string/auth/organizations/invitations/accept" \  -H "Content-Type: application/json" \  -d '{    "token": "string"  }'

Empty

Organization Invitation Preview Controller_preview

Path Parameters

token*string

appId*string

Response Body

curl -X GET "https://example.com/apps/string/auth/organizations/invitations/string"

Empty

Sso Auth Controller_start

Path Parameters

appId*string

Header Parameters

authorization*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

email*string

redirectUri*string

Doit figurer dans redirectUrlAllowlist — vérifié avant toute redirection vers un IdP.

nonce?string

Nonce anti-CSRF généré côté client, simplement reporté tel quel jusqu'au retour d'ACS (même contrat que le pont OAuth existant) — non validé par le backend, la vérification se fait côté frontend.

Response Body

curl -X POST "https://example.com/apps/string/auth/sso/start" \  -H "authorization: string" \  -H "Content-Type: application/json" \  -d '{    "email": "string",    "redirectUri": "string"  }'

Empty

Use the request body type in TypeScript.

SAMLResponse*string

RelayState*string

Response Body

curl -X POST "https://example.com/apps/string/auth/sso/string/acs" \  -H "Content-Type: application/json" \  -d '{    "SAMLResponse": "string",    "RelayState": "string"  }'

Empty

200

200

200

201

200

200

201

201

201

201

201

201

201

201

201

201

201

201

201

201

201

201

201

201

200

200

200

204

204

204

201