Accounts API

post

Query parameters

organizationCodestringOptional

emailstringOptional

impersonatorOrganizationCodestringOptional

impersonatorUserEmailstringOptional

Responses

400

Bad Request

application/jsontext/json

stringOptional

post

/api/accounts/cookies/login

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/login HTTP/1.1
Accept: */*

400

Bad Request

text

post

Responses

200

OK

post

/api/accounts/cookies/logout

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/logout HTTP/1.1
Accept: */*

200

OK

No content

Creates a new authentication cookie with the specified name and lifetime using the raw request body as the cookie value.

post

In contrast to security/cookies/generate endpoint, this endpoint makes no assumptions about the request body. This means you can POST whatever cookie name and cookie value you want (encoded/escaped or not) and this method tries to create a new cookie for you. This is useful for testing the behaviour of the API when it receives unexpected (or corrupted) cookie tokens. Please note this endpoint is available in localhost environments only!

Query parameters

namestringOptional

The name of the cookie to create. If not provided, uses the default cookie name from API configuration settings.

lifetimeinteger · int32Optional

The lifetime of the cookie in seconds. If not provided, uses the default lifetime from API configuration settings.

Responses

400

Bad Request

application/jsontext/json

stringOptional

post

/api/accounts/cookies/create

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/create HTTP/1.1
Accept: */*

400

Bad Request

text

Decodes and deserializes a cookie token from the request body.

post

Responses

200

OK

post

/api/accounts/cookies/decode

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/decode HTTP/1.1
Accept: */*

200

OK

No content

Generates a new authentication cookie using the provided token from the request body.

post

Responses

400

Bad Request

application/jsontext/json

stringOptional

post

/api/accounts/cookies/generate

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/generate HTTP/1.1
Accept: */*

400

Bad Request

text

Introspects the current authentication cookie and returns detailed information about the authentication and authorization status.

get

Authorizations

Cookie

InSite.WebTokenstringRequired

Responses

200

OK

get

/api/accounts/cookies/introspect

HTTPcURLJavaScriptPython

GET /v2/e01/api/accounts/cookies/introspect HTTP/1.1
Accept: */*

200

OK

No content

Validates a cookie token from the request body without setting it as an authentication cookie.

post

Responses

400

Bad Request

application/jsontext/json

stringOptional

post

/api/accounts/cookies/validate

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/validate HTTP/1.1
Accept: */*

400

Bad Request

text

post

Authorizations

BearerCookie

BearerstringRequired

Path parameters

languagestringRequired

Responses

200

OK

post

/api/accounts/cookies/change-language/{language}

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/change-language/{language} HTTP/1.1
Bearer: YOUR_API_KEY
Accept: */*

200

OK

No content

post

Authorizations

BearerCookie

BearerstringRequired

Path parameters

themestringRequired

Responses

200

OK

post

/api/accounts/cookies/change-theme/{theme}

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/change-theme/{theme} HTTP/1.1
Bearer: YOUR_API_KEY
Accept: */*

200

OK

No content

post

Authorizations

BearerCookie

BearerstringRequired

Responses

200

OK

post

/api/accounts/cookies/refresh-session

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/cookies/refresh-session HTTP/1.1
Bearer: YOUR_API_KEY
Accept: */*

200

OK

No content

post

Responses

200

OK

application/jsontext/json

post

/api/accounts/passwords/hash

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/passwords/hash HTTP/1.1
Accept: */*

200

OK

{
  "Hash": "text"
}

Generates a new client secret for the authenticated user, replacing any existing secret.

post

Authorizations

BearerCookie

BearerstringRequired

Query parameters

expiryinteger · int32Optional

The number of days until the secret expires. If omitted, the default is assumed (90 days).

Responses

400

Bad Request

application/jsontext/json

stringOptional

post

/api/accounts/secrets/generate

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/secrets/generate HTTP/1.1
Bearer: YOUR_API_KEY
Accept: */*

400

Bad Request

text

get

Authorizations

Secret

SecretstringRequired

Responses

200

OK

get

/api/accounts/secrets/introspect

HTTPcURLJavaScriptPython

GET /v2/e01/api/accounts/secrets/introspect HTTP/1.1
Secret: YOUR_API_KEY
Accept: */*

200

OK

No content

post

Body

application/json-patch+jsonapplication/jsontext/jsonapplication/*+json

DebugbooleanOptional

PagingbooleanOptional

Secretstring · nullableOptional

Lifetimeinteger · int32 · nullableOptional

Organizationstring · uuid · nullableOptional

Agentstring · uuid · nullableOptional

Subjectstring · uuid · nullableOptional

Responses

401

Unauthorized

application/jsontext/json

post

/api/accounts/tokens/generate

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/tokens/generate HTTP/1.1
Content-Type: application/json-patch+json
Accept: */*
Content-Length: 207

{
  "Debug": true,
  "Paging": true,
  "Secret": "text",
  "Lifetime": 1,
  "Organization": "123e4567-e89b-12d3-a456-426614174000",
  "Agent": "123e4567-e89b-12d3-a456-426614174000",
  "Subject": "123e4567-e89b-12d3-a456-426614174000"
}

application/json-patch+jsonapplication/jsontext/jsonapplication/*+json

401

Unauthorized

text

get

Authorizations

Bearer

BearerstringRequired

Responses

200

OK

application/jsontext/json

get

/api/accounts/tokens/introspect

HTTPcURLJavaScriptPython

GET /v2/e01/api/accounts/tokens/introspect HTTP/1.1
Bearer: YOUR_API_KEY
Accept: */*

200

OK

{
  "Jwt": null,
  "Principal": null
}

post

Responses

200

OK

application/jsontext/json

post

/api/accounts/tokens/validate

HTTPcURLJavaScriptPython

POST /v2/e01/api/accounts/tokens/validate HTTP/1.1
Accept: */*

200

OK

{
  "Subject": "text",
  "SignatureVerification": "text",
  "ExpiryVerification": "text",
  "AudienceVerification": "text",
  "IssuerVerification": "text"
}