Authentication
Sign in, reset passwords, and use bearer-token authentication for every headless client.
/api/v1/auth/pingList auth ping
List auth ping. This endpoint is public unless deployment policy requires otherwise.
Query parameters
| page | Zero-based page index where supported. |
| size | Page size where supported. |
Responses
Example request
curl -X GET "https://api.authspoke.com/api/v1/auth/ping"Example response
{
"id": "uuid",
"status": "OK"
}/api/v1/auth/reset-passwordChange your password
Authenticated self-service password change. Requires a bearer token; the target user is the token's principal (never a body username). The current password must verify.
Request body
| currentPassword* | string | |
| newPassword* | string |
Responses
Example request
curl -X POST "https://api.authspoke.com/api/v1/auth/reset-password" \
-H "Authorization: Bearer $TOKEN"/api/v1/auth/signinCreate or run auth signin
Create or run auth signin. The tenant is resolved server-side from the bearer token/session; callers do not pass a tenant subdomain in the API path.
Request body
| name | string | Display name or operation name where applicable. |
| status | string | Status or lifecycle value where applicable. |
| reason | string | Audit reason for governed changes. |
| metadata | object | Provider or business metadata. |
| configuration | object | Connector, policy, or resource configuration. |
Responses
Example request
curl -X POST "https://api.authspoke.com/api/v1/auth/signin" \
-H "Content-Type: application/json" \
-d '{"username":"[email protected]","password":"********"}'Example response
{
"id": "uuid",
"status": "OK"
}/api/v1/email/send-otpCreate or run email send otp
Create or run email send otp. The tenant is resolved server-side from the bearer token/session; callers do not pass a tenant subdomain in the API path.
Request body
| name | string | Display name or operation name where applicable. |
| status | string | Status or lifecycle value where applicable. |
| reason | string | Audit reason for governed changes. |
| metadata | object | Provider or business metadata. |
| configuration | object | Connector, policy, or resource configuration. |
Responses
Example request
curl -X POST "https://api.authspoke.com/api/v1/email/send-otp" \
-H "Content-Type: application/json" \
-d '{"username":"[email protected]","password":"********"}'Example response
{
"id": "uuid",
"status": "OK"
}/api/v1/email/verify-otpCreate or run email verify otp
Create or run email verify otp. The tenant is resolved server-side from the bearer token/session; callers do not pass a tenant subdomain in the API path.
Request body
| name | string | Display name or operation name where applicable. |
| status | string | Status or lifecycle value where applicable. |
| reason | string | Audit reason for governed changes. |
| metadata | object | Provider or business metadata. |
| configuration | object | Connector, policy, or resource configuration. |
Responses
Example request
curl -X POST "https://api.authspoke.com/api/v1/email/verify-otp" \
-H "Content-Type: application/json" \
-d '{"username":"[email protected]","password":"********"}'Example response
{
"id": "uuid",
"status": "OK"
}/api/v1/auth/tokenToken
Request body
Responses
Example request
curl -X POST "https://api.authspoke.com/api/v1/auth/token"