Authentication API

Authenticate and manage access tokens.

Login

POST /api/raisindb/sys/{tenant_id}/auth

Request:

{
  "username": "admin",
  "password": "your-password"
}

Response:

{
  "access_token": "eyJhbGc...",
  "refresh_token": "eyJhbGc...",
  "token_type": "Bearer",
  "expires_in": 3600
}

Refresh Token

POST /auth/refresh

Request:

{
  "refresh_token": "eyJhbGc..."
}

Change Password

POST /api/raisindb/sys/{tenant_id}/auth/change-password

Request:

{
  "old_password": "current-password",
  "new_password": "new-password"
}

API Keys

Create API Key

POST /api/raisindb/me/api-keys

Request:

{
  "name": "production-key",
  "expires_at": "2025-12-31T23:59:59Z"
}

List API Keys

GET /api/raisindb/me/api-keys

Revoke API Key

DELETE /api/raisindb/me/api-keys/{key_id}

OIDC Authentication

Authorize

GET /auth/oidc/{provider}

Redirects to OAuth provider.

Callback

GET /auth/oidc/{provider}/callback

Handles OAuth callback.