Aller au contenu
ExtentAPI

Overview

Authentication 1.0.0

Section intitulée « Authentication 1.0.0 »

Login, password, magic-link, MFA TOTP, refresh tokens. Tout ce qui concerne l’authentification IAM côté utilisateur final.

Informations

  • License: Proprietary
  • OpenAPI version: 3.1.0

Operations

Section intitulée « Operations »
POST
/v1/iam/auth/totp/enable
POST
/v1/iam/auth/totp/verify
POST
/v1/iam/auth/totp/disable
POST
/v1/iam/auth/totp/recovery-codes/regenerate
GET
/v1/iam/auth/csrf
POST
/v1/iam/auth/login
POST
/v1/iam/auth/refresh
POST
/v1/iam/auth/logout
GET
/v1/iam/auth/me
POST
/v1/iam/auth/forgot-password
POST
/v1/iam/auth/reset-password
POST
/v1/iam/auth/change-password
POST
/v1/iam/auth/verify-email
POST
/v1/iam/auth/magic-link/request
POST
/v1/iam/auth/magic-link/verify
POST
/v1/iam/auth/set-password
POST
/v1/iam/auth/register

Authentication

Section intitulée « Authentication »

apiKey

Section intitulée « apiKey »

Clé apo_<43 chars base64url> créée via POST /api-clients. Scopes: read | write | admin.

Security scheme type: apiKey

Header parameter name: x-api-key

internalToken

Section intitulée « internalToken »

Token statique partagé entre orchestrator et agents (APOPHIS_INTERNAL_TOKEN_PRIMARY). Rotation zero-downtime via APOPHIS_INTERNAL_TOKEN_SECONDARY.

Security scheme type: apiKey

Header parameter name: x-internal-token