Xeonr Developer Docs
API SpecificationPRIVATEAuthentication

Resolve Organisation

POST
/xeonr.auth.private.v1.AuthService/ResolveOrganisation

Resolves organisation metadata and public identity providers by domain or hostname.

Authentication: None required

Authorization

BearerAuth
AuthorizationBearer <token>

JWT access token for internal API access. Requires 'private' scope for most endpoints, 'admin' scope for administrative operations.

In: header

Header Parameters

Connect-Protocol-Version*number

Define the version of the Connect protocol

Value in1
Connect-Timeout-Ms?number

Define the timeout, in ms

Request Body

application/json

domain?string|null
Length1 <= length <= 255
hostname?string|null
Formathostname
Length1 <= length <= 255
[key: string]?never

Response Body

application/json

application/json

curl -X POST "https://auth.xeonr.io/xeonr.auth.private.v1.AuthService/ResolveOrganisation" \  -H "Connect-Protocol-Version: 1" \  -H "Content-Type: application/json" \  -d '{}'
{
  "organisationId": "string",
  "name": "string",
  "slug": "string",
  "domain": "string",
  "identityProviders": [
    {
      "id": "string",
      "slug": "string",
      "displayName": "string",
      "enabled": true,
      "usesPasswordClient": true
    }
  ],
  "config": {
    "brand": "string",
    "logoUrl": "string",
    "primaryColor": "string",
    "gradientColors": [
      "string"
    ],
    "font": {
      "family": "string",
      "url": "string"
    },
    "allowSignup": true,
    "userScopedClients": true
  }
}
{
  "code": "not_found",
  "message": "string",
  "details": [
    {
      "type": "string",
      "value": "string",
      "debug": {}
    }
  ]
}

Refresh Session POST

Exchanges a long-lived session token for a fresh short-lived access token, sliding the session's expiry. Lets IdP/social and just-signed-up users keep a long persistent session without re-authenticating, mirroring the password 'remember me' flow. **Authentication:** None required (session token required)

Verify MFA Challenge POST

Completes a login held by org-account 2FA: validates the TOTP or recovery code against the challenge token from HandleLogin and returns the portal token. **Authentication:** None required (challenge token required)