Autorisierung erteilen

curl --request POST \ --url https://api.hybridbox.io/v1/public/accounts/{account_id}/auth/authorizations \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data ' { "subject_id": "<string>", "capability_key": "<string>", "resource_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a" } '

{ "grant_kind": "<string>", "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", "subject_id": "<string>", "subject_type": "<string>", "capability_key": "<string>", "created_at": "2023-11-07T05:31:56Z", "resource_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", "resource_type": "<string>", "revoked_at": "2023-11-07T05:31:56Z" }

Autorisierungen

Authorization

string

header

erforderlich

Public API bearer credential sent as Authorization: Bearer <token>. Use either an OAuth access token or a Hybridbox Service account token.

Pfadparameter

account_id

string<uuid>

erforderlich

Body

application/json

Schema für granting ein new capability-based authorization.

grant_kind

enum<string>

erforderlich

Gewährung kind

Verfügbare Optionen:

capability,

account_owner,

super_admin

subject_id

string

erforderlich

Benutzer- oder Gruppenkennung

Minimum string length: 1

subject_type

enum<string>

erforderlich

Betrefftyp: Benutzer oder Gruppe

Verfügbare Optionen:

user,

group,

service_account

capability_key

string | null

Fähigkeit key for capability grants

resource_id

string<uuid> | null

Bereichsbezogener Ressourcenbezeichner

resource_type

enum<string> | null

Bereichsbezogener Ressourcentyp

Verfügbare Optionen:

client,

account,

workspace,

domain,

dns_record,

mailbox,

redirect,

forwarding,

credential,

tenant,

route,

proxy

Antwort

grant_kind

string

erforderlich

string<uuid>

erforderlich

subject_id

string

erforderlich

subject_type

string

erforderlich

capability_key

string | null

created_at

string<date-time> | null

resource_id

string<uuid> | null

resource_type

string | null

revoked_at

string<date-time> | null