Xeonr Developer Docs
API SpecificationPRIVATEAccounts

Get Account

POST
/xeonr.auth.private.v1.AccountService/GetAccount

Retrieves the full account details for the authenticated user, including connected external accounts and application enrollments.

Required scopes: auth:account:read

Authorization

BearerAuth
AuthorizationBearer <token>

JWT access token for internal API access. Requires 'private' scope for most endpoints, 'admin' scope for administrative operations.

In: header

Header Parameters

Connect-Protocol-Version*number

Define the version of the Connect protocol

Value in1
Connect-Timeout-Ms?number

Define the timeout, in ms

Request Body

application/json

[key: string]?never

Response Body

application/json

application/json

curl -X POST "https://auth.xeonr.io/xeonr.auth.private.v1.AccountService/GetAccount" \  -H "Connect-Protocol-Version: 1" \  -H "Content-Type: application/json" \  -d '{}'
{
  "account": {
    "id": "usr_a1b2c3d4e5f6",
    "username": "johndoe",
    "email": "[email protected]",
    "connections": [
      {
        "idpSlug": "string",
        "username": "johndoe_github",
        "createdAt": "2023-01-15T01:30:15.01Z",
        "externalId": "12345678",
        "identityProviderId": "string",
        "email": "[email protected]"
      }
    ],
    "createdAt": "2023-01-15T01:30:15.01Z",
    "updatedAt": "2023-01-15T01:30:15.01Z",
    "status": "ACCOUNT_STATUS_UNSPECIFIED",
    "isAdmin": true,
    "avatarUrl": "https://cdn.example.com/avatars/abc123"
  },
  "enrollments": [
    {
      "application": {
        "applicationId": "app_prod_myapp",
        "name": "My Application",
        "slug": "my-application",
        "websiteUrl": "app.example.com",
        "enabledIdps": [
          "github",
          "discord"
        ]
      },
      "enrolledAt": "2023-01-15T01:30:15.01Z"
    }
  ]
}
{
  "code": "not_found",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

Enroll MFA POST

Generates a new TOTP secret + provisioning URI for the authenticated user to add to an authenticator app. Requires a recent login (step-up). Enrollment is not active until confirmed via VerifyMfaEnrollment. **Required scopes:** `auth:account:edit`

Get MFA Status POST

Returns whether org-account two-factor authentication is enabled for the authenticated user and how many recovery codes remain. **Required scopes:** `auth:account:read`