Identity Service

Port 11001 · 270 endpoints · micro-services/identity-service/

API Key

Method	Path	Summary
GET	/admin/auth/api-keys	Admin list API Keys	detail →
GET	/admin/auth/api-keys/anomalies	Security Anomaly Detection	detail →
POST	/admin/auth/api-keys/batch-revoke	Batch revoke API Keys	detail →
POST	/admin/auth/api-keys/cleanup-audit-logs	Clean old audit logs	detail →
GET	/admin/auth/api-keys/expiring	Get expiring API Keys	detail →
GET	/admin/auth/api-keys/stats	Admin API Key statistics	detail →
DELETE	/admin/auth/api-keys/{id}/force	Admin force revoke API Key	detail →
GET	/auth/api-keys	Query API Key list	detail →
POST	/auth/api-keys	Create API Key	detail →
DELETE	/auth/api-keys/{id}	Revoke API Key	detail →
GET	/auth/api-keys/{id}	Get API Key details	detail →
GET	/auth/api-keys/{id}/audit-logs	Get API Key audit logs	detail →
POST	/auth/api-keys/{id}/ip-restrictions	Add IP restriction	detail →
DELETE	/auth/api-keys/{id}/ip-restrictions/{restriction_id}	Delete IP restriction	detail →
POST	/auth/api-keys/{id}/rotate	Rotate API Key	detail →
PUT	/auth/api-keys/{id}/scopes	Update API Key permission scopes	detail →
PUT	/auth/api-keys/{id}/status	Enable/disable API Key	detail →
GET	/auth/api-keys/{id}/usage	Get API Key usage statistics	detail →
GET	/auth/api-keys/{id}/usage-stats	Get API Key usage statistics	detail →
POST	/internal/identity/validate-key	Validate API Key (Internal)	detail →

Account Management

Method	Path	Summary
POST	/admin/impersonate	Admin impersonate user login	detail →
GET	/admin/users	List users	detail →
POST	/admin/users	Create user	detail →
POST	/admin/users/batch	Batch create users	detail →
POST	/admin/users/batch/status	Batch update user status	detail →
POST	/admin/users/merge	Merge users	detail →
DELETE	/admin/users/{user_id}	Delete user	detail →
GET	/admin/users/{user_id}	Get user details	detail →
PUT	/admin/users/{user_id}	Update user information	detail →
POST	/admin/users/{user_id}/account-unlocks	Unlock account	detail →
GET	/admin/users/{user_id}/identities	Get user identity list	detail →
POST	/admin/users/{user_id}/identities	Add user identity	detail →
DELETE	/admin/users/{user_id}/identities/{identity_id}	Remove user identity	detail →
PUT	/admin/users/{user_id}/identities/{identity_id}/set-primary	Set primary identity	detail →
POST	/admin/users/{user_id}/identities/{identity_id}/verifications	Verify user identity	detail →
POST	/admin/users/{user_id}/impersonate	Admin impersonate user	detail →
GET	/admin/users/{user_id}/login-histories	Get login history	detail →
GET	/admin/users/{user_id}/security-status	Get security status	detail →
PUT	/admin/users/{user_id}/status	Update user status	detail →
DELETE	/auth/me	Deactivate current account	detail →
GET	/auth/me/audit-logs	Get my audit logs	detail →
GET	/auth/me/children-consent	Get child privacy consent status	detail →
DELETE	/auth/me/consent	Revoke user consent	detail →
POST	/auth/me/consent	Record user consent	detail →
GET	/auth/me/consent-history	Get consent history	detail →
POST	/auth/me/delete-account	Permanently delete account (GDPR Right to Erasure/Account Deletion)	detail →
GET	/auth/me/devices	Get my device list	detail →
DELETE	/auth/me/devices/{device_id}	Remove device	detail →
PUT	/auth/me/devices/{device_id}/trust	Trust/untrust device	detail →
POST	/auth/me/email/change	Change email address	detail →
POST	/auth/me/email/verify	Verify email change	detail →
POST	/auth/me/export-data	Export my data (GDPR DSAR)	detail →
GET	/auth/me/memberships	Get my tenant membership status	detail →
POST	/auth/me/phone/change	Change phone number	detail →
POST	/auth/me/phone/verify	Verify phone number change	detail →
GET	/auth/me/recovery-contacts	Get recovery contacts list	detail →
POST	/auth/me/recovery-contacts	Add recovery contact	detail →
DELETE	/auth/me/recovery-contacts/{contact_id}	Remove recovery contact	detail →
GET	/auth/me/saml-links	Get SAML linked account list	detail →
DELETE	/auth/me/saml-links/{id}	Unlink SAML linked account	detail →
GET	/auth/me/security-events	Get security events list	detail →
POST	/auth/me/security-events/{event_id}/dismiss	Disable security event notifications	detail →
DELETE	/auth/me/sessions	Logout all sessions	detail →
GET	/auth/me/sessions	List my sessions	detail →
DELETE	/auth/me/sessions/{session_id}	Logout specified session	detail →
POST	/auth/me/stop-impersonation	End impersonation session	detail →
DELETE	/internal/identity/erase-user/{user_id}	Internal hard delete user	detail →
POST	/internal/maker-checker/record	Record Maker-Checker	detail →

Admin

Method	Path	Summary
GET	/admin/users/{user_id}/oauth-connections	Admin view user OAuth connections	detail →

Admin/Agents

Method	Path	Summary
GET	/admin/agents	List Agents	detail →
POST	/admin/agents	Create Agent	detail →
DELETE	/admin/agents/{id}	Revoke Agent	detail →
GET	/admin/agents/{id}	Get Agent	detail →
PUT	/admin/agents/{id}	Update Agent	detail →

Admin/Delegation

Method	Path	Summary
GET	/admin/delegation-grants	List delegation authorizations	detail →
POST	/admin/delegation-grants	Create delegation authorization	detail →
DELETE	/admin/delegation-grants/{id}	Revoke delegation authorization	detail →
GET	/admin/delegation-grants/{id}	Get delegation authorization details	detail →

Admin/IoTs

Method	Path	Summary
GET	/admin/iots	List Devices	detail →
POST	/admin/iots	Create Device	detail →
DELETE	/admin/iots/{id}	Revoke Device	detail →
GET	/admin/iots/{id}	Get Device	detail →

Admin/Robots

Method	Path	Summary
GET	/admin/robots	List Robots	detail →
POST	/admin/robots	Create Robot	detail →
DELETE	/admin/robots/{id}	Delete Robot	detail →
GET	/admin/robots/{id}	Get Robot	detail →
PUT	/admin/robots/{id}	Update Robot	detail →
POST	/admin/robots/{id}/commission	Commission Robot	detail →
POST	/admin/robots/{id}/decommission	Decommission Robot	detail →
POST	/admin/robots/{id}/intent	Issue Intent Token	detail →
POST	/admin/robots/{id}/intent/revoke	Revoke Intent Token	detail →

Authentication

Method	Path	Summary
PUT	/admin/users/{user_id}/password	Modify password	detail →
POST	/admin/users/{user_id}/password-resets	Reset password	detail →
GET	/admin/users/{user_id}/password-status	Get user password status	detail →
POST	/auth/anonymous	Anonymous authentication	detail →
GET	/auth/captcha/challenge	Get CAPTCHA challenge	detail →
POST	/auth/forgot-password	Forgot password	detail →
POST	/auth/generate-ticket	Generate one-time ticket	detail →
POST	/auth/id-token/signin	ID Token login	detail →
POST	/auth/login	User login	detail →
POST	/auth/login/email-code	Email verification code login	detail →
POST	/auth/login/phone-code	Phone verification code login	detail →
POST	/auth/magic-link	Send magic link	detail →
GET	/auth/magic-link/callback	Magic link callback (GET→POST two-step redirect)	detail →
POST	/auth/magic-link/callback	Magic link callback (GET→POST two-step redirect)	detail →
GET	/auth/magic-link/confirm	Verify magic link	detail →
POST	/auth/magic-link/request	Request send magic link	detail →
GET	/auth/me	Get current logged-in user info	detail →
PUT	/auth/me	Update current user info	detail →
GET	/auth/me/email-verification-status	Check email verification status	detail →
PUT	/auth/me/password	Change current user password	detail →
POST	/auth/me/password-strength	Check password strength	detail →
GET	/auth/me/permissions	Get current user permissions	detail →
GET	/auth/me/phone-verification-status	Check phone verification status	detail →
POST	/auth/me/switch-tenant	Switch current tenant	detail →
GET	/auth/me/tenants	Get current user tenants	detail →
GET	/auth/oauth/accounts	Get user OAuth account list	detail →
POST	/auth/oauth/bind	Link OAuth account	detail →
GET	/auth/oauth/providers	Get OAuth provider list	detail →
POST	/auth/oauth/unbind	Unlink OAuth account	detail →
GET	/auth/oauth/{provider}	Initiate OAuth login	detail →
GET	/auth/oauth/{provider}/callback	OAuth callback	detail →
POST	/auth/re-authenticate	Re-authenticate (Step-up)	detail →
POST	/auth/recover-account	Initialize account recovery via recovery contact	detail →
POST	/auth/recover-account/reset	Reset password via recovery code	detail →
POST	/auth/recovery/complete	Complete account recovery	detail →
POST	/auth/recovery/request	Initiate account recovery	detail →
POST	/auth/recovery/verify	Verify account recovery code	detail →
POST	/auth/refresh	Refresh access token	detail →
POST	/auth/register	User registration	detail →
GET	/auth/register/check-email	Check email availability	detail →
POST	/auth/register/check-email	Check email availability	detail →
GET	/auth/register/check-username	Check username availability	detail →
POST	/auth/register/check-username	Check username availability	detail →
POST	/auth/register/email-code	Email verification code registration	detail →
POST	/auth/register/invitation	Invitation registration	detail →
POST	/auth/register/oauth	OAuth supplementary registration	detail →
POST	/auth/register/phone-code	Phone verification code registration	detail →
POST	/auth/register/reapply	Re-apply for registration	detail →
POST	/auth/resend-sms-code	Resend SMS verification code	detail →
POST	/auth/resend-verification-email	Resend email verification	detail →
POST	/auth/reset-password	Reset password	detail →
POST	/auth/send-login-code	Send login verification code	detail →
POST	/auth/send-sms-code	Send SMS verification code	detail →
POST	/auth/send-verification-email	Send email verification	detail →
POST	/auth/sso/callback	Enterprise SSO callback	detail →
POST	/auth/sso/initiate	Initiate enterprise SSO login	detail →
POST	/auth/ticket/signin	Ticket-based login	detail →
POST	/auth/verify-email	Verify email address	detail →
POST	/auth/verify-phone	Verify phone number	detail →
POST	/auth/verify-reset-code	Verify reset verification code	detail →
POST	/auth/web3/verify	Verify Web3 wallet signature	detail →
POST	/internal/identity/verify-password	Verify password	detail →
POST	/internal/record-login-failure	Record login failure	detail →
POST	/internal/record-login-success	Record login success	detail →
GET	/public/auth-config/by-domain/{domain}	Get tenant authentication configuration by domain (Public)	detail →
GET	/public/auth-config/by-slug/{slug}	Get authentication configuration by tenant identifier (Public)	detail →
GET	/public/auth-config/{tenant_id}	Get tenant authentication configuration (Public)	detail →
POST	/public/password-strength	Check password strength (Public)	detail →
GET	/public/tenants/discover	Discover publicly joinable tenants	detail →

Authentication - Internal

Method	Path	Summary
GET	/public/key-exchange	ECDH key exchange	detail →

Authentication Policy Management

Method	Path	Summary
GET	/admin/auth-policies	List tenant authentication policies	detail →
DELETE	/admin/auth-policies/{tenant_id}	Delete tenant authentication policy	detail →
GET	/admin/auth-policies/{tenant_id}	Get tenant authentication policy	detail →
PUT	/admin/auth-policies/{tenant_id}	Update tenant authentication policy	detail →

Identity Providers

Method	Path	Summary
GET	/admin/identity-providers	List identity providers	detail →
POST	/admin/identity-providers	Create identity provider	detail →
POST	/admin/identity-providers/import-oidc-discovery	Import OIDC Discovery	detail →
POST	/admin/identity-providers/import-saml-metadata	Import SAML Metadata	detail →
DELETE	/admin/identity-providers/{id}	Delete identity provider	detail →
GET	/admin/identity-providers/{id}	Get identity provider details	detail →
PUT	/admin/identity-providers/{id}	Update identity provider	detail →
POST	/admin/identity-providers/{id}/activate	Enable identity provider	detail →
GET	/admin/identity-providers/{id}/attribute-mapping	Get attribute mapping	detail →
PUT	/admin/identity-providers/{id}/attribute-mapping	Update attribute mapping	detail →
GET	/admin/identity-providers/{id}/certificates	List certificates	detail →
POST	/admin/identity-providers/{id}/certificates	Upload certificate	detail →
DELETE	/admin/identity-providers/{id}/certificates/{cert_id}	Delete certificate	detail →
POST	/admin/identity-providers/{id}/certificates/{cert_id}/rotate	Certificate rotation	detail →
POST	/admin/identity-providers/{id}/deactivate	Disable identity provider	detail →
GET	/admin/identity-providers/{id}/jit-config	Get JIT configuration	detail →
PUT	/admin/identity-providers/{id}/jit-config	Update JIT configuration	detail →
GET	/admin/identity-providers/{id}/stats	Get provider statistics	detail →
POST	/admin/identity-providers/{id}/test	Test identity provider connection	detail →
GET	/admin/identity-providers/{id}/users	Get provider associated users	detail →

IoTs

Method	Path	Summary
GET	/iots	List User Devices	detail →
POST	/iots/pair	Pair Device	detail →
DELETE	/iots/{id}	Unpair Device	detail →
POST	/iots/{id}/transfer	Transfer Device	detail →

Maker-Checker

Method	Path	Summary
GET	/admin/maker-checker	List maker-checker records	detail →
DELETE	/admin/maker-checker/{id}	Delete maker-checker record	detail →

Minor Management

Method	Path	Summary
POST	/admin/users/{user_id}/children-consent/deny	Reject child consent	detail →
POST	/admin/users/{user_id}/children-consent/verify	Verify child consent	detail →

Multi-Factor Authentication

Method	Path	Summary
POST	/auth/mfa/verify-challenge	Verify MFA challenge	detail →

NHI Agents

Method	Path	Summary
GET	/admin/agents/{id}/credentials	List Agent Credentials	detail →
POST	/admin/agents/{id}/credentials	Create Agent Credential	detail →
DELETE	/admin/agents/{id}/credentials/{cred_id}	Revoke Agent Credential	detail →
GET	/admin/agents/{id}/credentials/{cred_id}	Get Agent Credential	detail →
POST	/admin/agents/{id}/credentials/{cred_id}/rotate	Rotate Agent Credential	detail →

NHI Management

Method	Path	Summary
GET	/admin/policies/nhi	Get NHI policy	detail →
PUT	/admin/policies/nhi	Update NHI policy	detail →

OAuth

Method	Path	Summary
GET	/admin/users/{user_id}/oauth-connections	Admin view user OAuth connections	detail →

OAuth Authorization

Method	Path	Summary
POST	/auth/oidc/backchannel-logout	OIDC back-channel logout	detail →
POST	/auth/oidc/logout	RP-initiated logout	detail →
GET	/auth/oidc/session-iframe	OIDC session state iframe	detail →

Role Permissions

Method	Path	Summary
GET	/admin/abac-policies	List ABAC policies	detail →
POST	/admin/abac-policies	Create ABAC policy	detail →
DELETE	/admin/abac-policies/{id}	Delete ABAC policy	detail →
GET	/admin/abac-policies/{id}	Get ABAC policy details	detail →
PUT	/admin/abac-policies/{id}	Update ABAC policy	detail →
POST	/admin/relationships/check	Check relationship permission	detail →
GET	/admin/relationships/expand	Expand relationship tree	detail →
GET	/admin/role-activations	List role activation records	detail →
POST	/admin/role-activations/{id}/approve	Approve role activation	detail →
POST	/admin/role-activations/{id}/revoke	Revoke role activation	detail →
GET	/auth/me/role-activations	Query my role activations	detail →
POST	/auth/me/role-activations	Request role activation	detail →
POST	/internal/pim/cleanup-expired	Clean up expired role activations	detail →

SCIM

Method	Path	Summary
GET	/scim/Groups	List SCIM groups	detail →
POST	/scim/Groups	Create SCIM group	detail →
DELETE	/scim/Groups/{id}	Delete SCIM group	detail →
GET	/scim/Groups/{id}	Get SCIM group	detail →
PATCH	/scim/Groups/{id}	Partially update SCIM group	detail →
PUT	/scim/Groups/{id}	Update SCIM group	detail →
GET	/scim/ResourceTypes	SCIM resource types	detail →
GET	/scim/Schemas	SCIM Schemas	detail →
GET	/scim/ServiceProviderConfig	SCIM service provider configuration	detail →
GET	/scim/Users	List SCIM users	detail →
POST	/scim/Users	Create SCIM user	detail →
DELETE	/scim/Users/{id}	Delete SCIM user	detail →
GET	/scim/Users/{id}	Get SCIM user	detail →
PATCH	/scim/Users/{id}	Partially update SCIM user	detail →
PUT	/scim/Users/{id}	Update SCIM user	detail →

Security

Method	Path	Summary
GET	/admin/security/risk-events	Risk event list	detail →
GET	/admin/security/risk-events/aggregation	Risk event aggregation	detail →

Security Management

Method	Path	Summary
GET	/admin/security/risk-config	Get risk configuration	detail →
PUT	/admin/security/risk-config	Update risk configuration	detail →
POST	/admin/security/risk-config/reset	Reset risk configuration	detail →
GET	/admin/security/risk-dashboard	Risk dashboard	detail →

Security Policy

Method	Path	Summary
GET	/admin/security/auth-config	Get authentication configuration	detail →
PUT	/admin/security/auth-config	Update authentication configuration	detail →
GET	/admin/security/password-policy	Get password policy	detail →
PUT	/admin/security/password-policy	Update password policy	detail →
GET	/admin/security/password-stats	Get password statistics	detail →

Sessions & Devices

Method	Path	Summary
GET	/auth/me/authenticator/backup		detail →
POST	/auth/me/authenticator/backup		detail →
DELETE	/auth/me/authenticator/backup/{id}		detail →
GET	/auth/me/authenticator/devices		detail →
DELETE	/auth/me/authenticator/devices/{id}	Remove authenticator device	detail →
POST	/auth/qr-login/cancel	Cancel QR code login	detail →
POST	/auth/qr-login/confirm	Confirm QR code login	detail →
POST	/auth/qr-login/initiate	Initiate QR code login	detail →
POST	/auth/qr-login/scan	Scan QR code login	detail →
GET	/auth/qr-login/status	Query QR code login status	detail →
DELETE	/devices	Remove all devices	detail →
GET	/devices	Get user device list	detail →
DELETE	/devices/{id}	Remove device	detail →
PUT	/devices/{id}/trust	Trust/Untrust device	detail →

WebAuthn

Method	Path	Summary
GET	/auth/me/webauthn-credentials	Get registered Passkey list	detail →
DELETE	/auth/me/webauthn-credentials/{id}	Delete Passkey	detail →
POST	/auth/webauthn/authenticate/begin	Start Passkey public authentication	detail →
POST	/auth/webauthn/authenticate/complete	Complete Passkey public authentication	detail →
POST	/auth/webauthn/login/begin	Start Passkey login	detail →
POST	/auth/webauthn/login/complete	Complete Passkey login	detail →
POST	/auth/webauthn/register/begin	Start Passkey registration	detail →
POST	/auth/webauthn/register/complete	Complete Passkey registration	detail →

admin

Method	Path	Summary
GET	/admin/ldap/health	LDAP directory health check	detail →
POST	/admin/ldap/test-connection	Test LDAP directory connection	detail →
GET	/admin/ldap/{name}/group-role-mapping	Get LDAP group-role mapping	detail →
PUT	/admin/ldap/{name}/group-role-mapping	Update LDAP group-role mapping	detail →

auth

Method	Path	Summary
POST	/auth/ldap/login	LDAP directory authentication	detail →