AM
JA
無料で始める
メニュー

Contents

User authentication and management

GET/auth/{provider}/authorize

Provider-first OAuth authorize entrypoint. Internally forwards to /oauth2/authorize with the provider connection set. More

Responses
303
Redirect
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/{provider}/callback

Provider-first OAuth callback entrypoint. Internally forwards to /oauth2/callback/:provider. More

Responses
303
Redirect
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/accept-invite

Accept an invite to join an account using an invite token. Returns a login response if successful.

Users should receive a url either via email or other means with a unique token param such that following the link accepts the invite.

An invite is a one-time login, so the client is expected to either present a set password flow, or use email magic links/SSO from then on. More

Responses
200application/jsonAuthenticationResult
OK
The complete result of a successful authentication operation, including tokens and user profile context
tokensSessionTokensrequired
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
profileSessionProfilerequired
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/check-email

Check if an email exists and which login methods are available. Used for multi-step login flows to determine next steps. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
csrf_tokenstring
emailstring · emailrequired
Responses
200application/json
OK
schemaobject
statusrequired
preferredarrayrequired
itemrequired
availablearrayrequired
itemrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/csrf-session

Initialize a CSRF session cookie. Sets an HttpOnly, Secure, SameSite=Strict cookie used for CSRF token generation. Returns a JavaScript snippet for auto-fetching the token. More

Responses
200application/javascript
A small JavaScript snippet to fetch the CSRF token with the CSRF session cookie we just set.
schemastring
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/csrf-token

Generate a CSRF token for the current session. Used to protect against Cross-Site Request Forgery attacks. Send in the X-CSRF-Token header of state-changing requests. More

Responses
200application/json
CSRF token generated successfully
schema
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/login-methods

Return currently available login methods for a client. Includes OAuth provider authorize/callback endpoints and password/magic-link submit URLs. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
Responses
200application/json
OK
schemaobject
oauth_googleobject
login_methodrequired
authorize_urlstring · urirequired
callback_urlstring · urirequired
oauth_githubobject
login_methodrequired
authorize_urlstring · urirequired
callback_urlstring · urirequired
oauth_facebookobject
login_methodrequired
authorize_urlstring · urirequired
callback_urlstring · urirequired
oauth_appleobject
login_methodrequired
authorize_urlstring · urirequired
callback_urlstring · urirequired
oauth_microsoftobject
login_methodrequired
authorize_urlstring · urirequired
callback_urlstring · urirequired
passwordobject
login_methodrequired
submit_urlstring · urirequired
magic_linkobject
login_methodrequired
submit_urlstring · urirequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/me

Get the current authenticated user’s profile. Returns user info, email credentials, and account memberships. More

Responses
200application/jsonSessionProfile
OK
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
idstringrequired
user_idstringrequired
Unique identifier for a user.
emailEmailAddress | nullEmailAddress
A valid, normalized email address.
hashed_emailstring | null
email_verified_atstring | null
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Option 2object
accountAccountrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/refresh

Exchange a refresh token for a new access token and refresh token.

You can use this endpoint in two ways:

  1. JSON body (direct API calls)
  • Send refresh_token in the JSON request body.
  • This is the usual choice for server-side code or scripts that call the HTTP API directly.
  1. Cookie-based session (browser or SDK clients)
  • Send the request with credentials/cookies.
  • If refresh_token is not present in the JSON body, the server will try to read the refresh token from the configured refresh-token cookie (the default cookie name is refresh_token).

Cookie-based refresh only works when the browser can send cookies to the auth service. In practice this means:

  • The auth service is exposed on the same domain as your application, or
  • Your application calls the auth service through a reverse proxy so that the browser sees a matching domain.

When the request uses cookies and the refresh succeeds, the server also updates the HTTP-only cookies with the new tokens.

Note that the access token’s contents are not changed by a refresh; it contains the same claims as the previous access token, but with a new expiration time.

More

Body application/json
refresh_tokenstring
Optional. If omitted, the server will try to read the refresh token from a cookie (when cookies are available).
client_idstring
Unique identifier for a client application.
Responses
200application/jsonSessionTokens
OK
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/reset-password

Reset a user’s password using a token from the password reset email. Requires a strong password meeting complexity requirements. More

Body application/json
tokenstringrequired
new_passwordstringrequired
Responses
200application/json
OK
schema
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/send-email-verification

Send an email verification link to confirm ownership of an email address. Requires authentication. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
email_idstringrequired
Responses
204
OK
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/send-magic-link

Send a one-time passwordless login link to the user’s email. The link authenticates the user when clicked. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
csrf_tokenstring
Responses
204
OK
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/send-password-reset

Send a password reset link to the user’s email. The link allows setting a new password when clicked. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
csrf_tokenstring
Responses
204
OK
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/sign-in

Authenticate a user with email and password. Returns access tokens, refresh tokens, and the user’s profile on success. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
emailstringrequired
passwordstringrequired
csrf_tokenstring
Responses
200application/jsonAuthenticationResult
OK
The complete result of a successful authentication operation, including tokens and user profile context
tokensSessionTokensrequired
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
profileSessionProfilerequired
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/sign-in-with-token

Sign in a user using a one-time login token (e.g., from magic links, invite emails, or OTP flows). This endpoint is designed for direct navigation via emailed links, hence the GET method and query parameter.

The token is single-use, short-lived, and invalidated upon successful consumption. For security, ensure links are delivered over encrypted channels and include CSRF protections in redirect flows if applicable.

Unlike credential-based sign-in (POST /auth/sign-in), this endpoint does not require authentication headers and returns an AuthenticationResult on success, enabling immediate session establishment.

More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Responses
200application/jsonAuthenticationResult
OK
The complete result of a successful authentication operation, including tokens and user profile context
tokensSessionTokensrequired
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
profileSessionProfilerequired
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/auth/sign-up

Register a new user with email and password. Creates a user, account, and returns authentication tokens on success. More

Headers
Originstring · urirequired
Origin of the caller (scheme://host[:port])
Body application/json
client_idstring
Unique identifier for a client application.
csrf_tokenstring
passwordstringrequired
preferred_languagestring
localestring
timezonestring
Responses
200application/jsonAuthenticationResult
OK
The complete result of a successful authentication operation, including tokens and user profile context
tokensSessionTokensrequired
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
profileSessionProfilerequired
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/verify

Verify a user’s email address using a verification token sent via email. Marks the email as verified on success. More

Responses
204
No Content
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/waitlists

List the current user’s waitlist signups in the token account context. More

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for a waitlist row.
application_idstringrequired
Unique identifier for an application.
user_idstringrequired
Unique identifier for a user.
account_idstringrequired
Unique identifier for an account.
feature_keystringrequired
Feature key for the waitlist row.
created_atstringrequired
updated_atstringrequired
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
DELETE/auth/waitlists/{feature_key}

Idempotently remove the current user from a waitlist feature in the token account context. More

Responses
200application/json
OK
schemaobject
dataobjectrequired
feature_keystringrequired
Feature key for the waitlist row.
signed_upbooleanrequired
waitlist_idstring | nullrequired
Unique identifier for a waitlist row.
linksobjectrequired
selfstringrequired
URL of the current resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/auth/waitlists/{feature_key}

Check whether the current user is signed up for a waitlist feature in the token account context. More

Responses
200application/json
OK
schemaobject
dataobjectrequired
feature_keystringrequired
Feature key for the waitlist row.
signed_upbooleanrequired
waitlist_idstring | nullrequired
Unique identifier for a waitlist row.
linksobjectrequired
selfstringrequired
URL of the current resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
PUT/auth/waitlists/{feature_key}

Idempotently sign up the current user for a waitlist feature in the token account context. More

Responses
200application/json
OK
schemaobject
dataobjectrequired
feature_keystringrequired
Feature key for the waitlist row.
signed_upbooleanrequired
waitlist_idstring | nullrequired
Unique identifier for a waitlist row.
linksobjectrequired
selfstringrequired
URL of the current resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring

Models

AccessToken
string
A short-lived JWT access token signed by the authentication service
Account
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
AuthenticationResult
tokensSessionTokensrequired
The set of tokens issued to a client upon successful authentication or token refresh
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
profileSessionProfilerequired
A user's session profile including their credentials, memberships, identity, and currently active membership context.
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
idstringrequired
user_idstringrequired
Unique identifier for a user.
emailEmailAddress | nullEmailAddress
A valid, normalized email address.
hashed_emailstring | null
email_verified_atstring | null
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Nested fields truncated. Expand to continue inline, or use the model link.
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
Option 2object
Nested fields truncated. Expand to continue inline, or use the model link.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Option 2object
accountAccountrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
EmailAddress
string · email
A valid, normalized email address.
EmailCredential
idstringrequired
user_idstringrequired
Unique identifier for a user.
emailEmailAddress | nullEmailAddress
A valid, normalized email address.
hashed_emailstring | null
email_verified_atstring | null
Membership
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
ProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
RefreshToken
string
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
SessionProfile
idstringrequired
Unique identifier for a user.
application_idstringrequired
Unique identifier for an application.
statusrequired
credentialsarrayrequired
itemEmailCredentialrequired
Associates an email address with a user for authentication. Used to look up users during login flows and verify email ownership.
idstringrequired
user_idstringrequired
Unique identifier for a user.
emailEmailAddress | nullEmailAddress
A valid, normalized email address.
hashed_emailstring | null
email_verified_atstring | null
membershipsarrayrequired
itemallOfrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Option 2object
accountAccountrequired
Nested fields truncated. Expand to continue inline, or use the model link.
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
identityUserIdentity | nullUserIdentityrequired
Personal profile information for a user including name, avatar, and locale preferences. Stored separately from authentication data for GDPR compliance.
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
active_membershipallOf | nullrequired
Variant
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
MembershipMembership
Links a user to an account with a specific role (owner, member, or viewer). Users can have memberships in multiple accounts.
idstringrequired
Unique identifier for a membership.
account_idstringrequired
Unique identifier for an account.
user_idstringrequired
Unique identifier for a user.
rolerequired
Option 2object
accountAccountrequired
Represents a billing container with domains and billing settings. Accounts form a hierarchy with applications where types alternate.
idstringrequired
Unique identifier for an account.
parent_idstring | nullrequired
Parent resource ID (application ID for accounts).
Variant
Unique identifier for an account.
Option 1string
Unique identifier for an account.
Unique identifier for an application.
Option 2string
Unique identifier for an application.
namestring | null
Display name for the account.
avatar_urlstring · uri | null
URL to the account's avatar image.
SessionTokens
access_tokenAccessTokenrequired
A short-lived JWT access token signed by the authentication service
refresh_tokenRefreshTokenrequired
An opaque long-lived refresh token used to obtain new access tokens. Can be revoked.
token_typeTokenTyperequired
Description of how the access token should be used
TimestampInSeconds
integer
A Unix timestamp in seconds since the epoch
TokenType
TokenType
Description of how the access token should be used
UserIdentity
idstringrequired
Unique identifier for a user.
avatar_urlstring · uri | null
external_idstring | null
given_namestring | null
family_namestring | null
display_namestring | null
preferred_languagestring | null
localestring | null
timezonestring | null
ValidationProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring