Applications

postAdd Enrollment

Enrolls a user in an application with the specified roles. **Required scopes:** `auth:enrollments:edit`

postCreate Application

Creates a new application with the specified configuration, including identity providers, scopes, and enrollment settings. **Required scopes:** `auth:apps:edit`

postCreate Scope

Creates a new OAuth scope for an application. Optionally assign the scope to a specific role. **Required scopes:** `auth:scopes:edit`

postCreate Resource Type

Registers a new resource type for Rich Authorization Requests (RFC 9396). The type name will be used as {app_slug}:{type} in authorization_details. **Required scopes:** `auth:apps:edit`

postCreate Role

Creates a new role for an application. Roles can be assigned to users and scopes. **Required scopes:** `auth:roles:edit`

postDelete Application

Permanently deletes an application and all associated data including enrollments and scopes. **Required scopes:** `auth:apps:edit`

postDelete Role

Deletes a role from an application. Users with this role will lose the associated permissions. **Required scopes:** `auth:roles:edit`

postGet Application

Retrieves the full details of an application by its ID, including scopes, roles, and configuration. **Required scopes:** `auth:apps:read`

postList Applications

Returns a list of all applications in the system. **Required scopes:** `auth:apps:read`

postList Enrollments

Returns all user enrollments for an application, including their assigned roles. **Required scopes:** `auth:enrollments:read`

postRemove Scope

Removes an OAuth scope from an application. **Required scopes:** `auth:scopes:edit`

postRemove Enrollment

Removes a user's enrollment from an application, revoking their access. **Required scopes:** `auth:enrollments:edit`

postRemove Resource Type

Removes a resource type from an application. **Required scopes:** `auth:apps:edit`

postUpdate Application

Updates an existing application's configuration. Use update_mask to specify which fields to update. **Required scopes:** `auth:apps:edit`

postUpdate Scope

Updates an existing OAuth scope's configuration. **Required scopes:** `auth:scopes:edit`

postUpdate Enrollment

Updates a user's enrollment to assign or remove roles. **Required scopes:** `auth:enrollments:edit`

Updates an existing resource type's properties (schema, display fields, iac_managed) without requiring delete and recreate. Use update_mask to specify which fields to update. **Required scopes:** `auth:apps:edit`

postUpdate Role

Updates an existing role's properties (e.g. iac_managed) without requiring delete and recreate. **Required scopes:** `auth:roles:edit`

PRIVATEApplications