Boundary controller HTTP API

Auth Method Service

List Auth MethodsGET/v1/auth-methods

Lists all auth methods.

Query Parameters

scope_id string

The scope id in which to list auth methods.

recursive boolean

Whether to recursively list auth methods in child scopes of the provided scope.

filter string

Filter can be specified to only return items that match the filter. See filter expressions for more information.

list_token string

An opaque token used to continue an existing iteration or request updated items. If not specified, pagination will start from the beginning. To learn more about list pagination in Boundary, refer to list pagination.

page_size integer

The maximum size of a page in this iteration. If unset, the default page size configured will be used. If the page_size is greater than the max page size configured, the page size will be truncated to this number.

Successful Response

items object[]

AuthMethod contains all fields related to an Auth Method resource

id string

Output only. The ID of the Auth Method.

scope_id string

The ID of the Scope of which this Auth Method is a part.

scope object

Output only. Scope information for this Auth method.

id string

The ID of the Scope.

type string

The type of the Scope.

name string

The name of the Scope, if any.

description string

The description of the Scope, if any.

parent_scope_id string

The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

created_time string

Output only. The time this resource was created.

updated_time string

Output only. The time this resource was last updated.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

is_primary boolean

Output only. Whether this auth method is the primary auth method for it's scope. To change this value update the primary_auth_method_id field on the scope.

authorized_actions string[]

authorized_collection_actions object

Output only. The authorized actions for the scope's collections.

response_type string

The type of response, either "delta" or "complete". Delta signifies that this is part of a paginated result or an update to a previously completed pagination. Complete signifies that it is the last page.

list_token string

An opaque token used to continue an existing pagination or request updated items. Use this token in the next list request to request the next page.

sort_by string

The name of the field which the items are sorted by.

sort_dir string

The direction of the sort, either "asc" or "desc".

removed_ids string[]

est_item_count integer

An estimate at the total items available. This may change during pagination.

Create Auth MethodPOST/v1/auth-methods

Creates a single auth method.

Body Parameters

scope_id string

The ID of the Scope of which this Auth Method is a part.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

Successful Response

id string

Output only. The ID of the Auth Method.

scope_id string

The ID of the Scope of which this Auth Method is a part.

scope object

Output only. Scope information for this Auth method.

id string

The ID of the Scope.

type string

The type of the Scope.

name string

The name of the Scope, if any.

description string

The description of the Scope, if any.

parent_scope_id string

The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

created_time string

Output only. The time this resource was created.

updated_time string

Output only. The time this resource was last updated.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

is_primary boolean

Output only. Whether this auth method is the primary auth method for it's scope. To change this value update the primary_auth_method_id field on the scope.

authorized_actions string[]

authorized_collection_actions object

Output only. The authorized actions for the scope's collections.

AuthenticatePOST/v1/auth-methods/{auth_method_id}:authenticate

Authenticate a user to an scope and retrieve an authentication token.

Path Parameters

auth_method_id string

The ID of the auth method in the system that should be used for authentication.

Body Parameters

token_type string

This can be "cookie" or "token". If not provided, "token" will be used. "cookie" activates a split-cookie method where the token is split partially between http-only and regular cookies in order to keep it safe from rogue JS in the browser. Deprecated, use "type" instead.

type string

attributes object

Attributes are passed to the auth method; the valid keys and values depend on the type of auth method as well as the command.

command string

The command to perform.

Get Auth MethodGET/v1/auth-methods/{id}

Gets a single auth method.

Path Parameters

id string

Id of the auth method being requested.

Successful Response

id string

Output only. The ID of the Auth Method.

scope_id string

The ID of the Scope of which this Auth Method is a part.

scope object

Output only. Scope information for this Auth method.

id string

The ID of the Scope.

type string

The type of the Scope.

name string

The name of the Scope, if any.

description string

The description of the Scope, if any.

parent_scope_id string

The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

created_time string

Output only. The time this resource was created.

updated_time string

Output only. The time this resource was last updated.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

is_primary boolean

Output only. Whether this auth method is the primary auth method for it's scope. To change this value update the primary_auth_method_id field on the scope.

authorized_actions string[]

authorized_collection_actions object

Output only. The authorized actions for the scope's collections.

Delete Auth MethodDELETE/v1/auth-methods/{id}

Deletes an AuthMethod

Path Parameters

id string

Update Auth MethodPATCH/v1/auth-methods/{id}

Updates an auth method.

Path Parameters

id string

Body Parameters

scope_id string

The ID of the Scope of which this Auth Method is a part.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

Successful Response

id string

Output only. The ID of the Auth Method.

scope_id string

The ID of the Scope of which this Auth Method is a part.

scope object

Output only. Scope information for this Auth method.

id string

The ID of the Scope.

type string

The type of the Scope.

name string

The name of the Scope, if any.

description string

The description of the Scope, if any.

parent_scope_id string

The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

created_time string

Output only. The time this resource was created.

updated_time string

Output only. The time this resource was last updated.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

is_primary boolean

Output only. Whether this auth method is the primary auth method for it's scope. To change this value update the primary_auth_method_id field on the scope.

authorized_actions string[]

authorized_collection_actions object

Output only. The authorized actions for the scope's collections.

Change StatePOST/v1/auth-methods/{id}:change-state

Changes the state of an OIDC AuthMethod

Path Parameters

id string

Body Parameters

version integer

Version is used to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

attributes object

The attributes specific to this auth method's state.

Successful Response

id string

Output only. The ID of the Auth Method.

scope_id string

The ID of the Scope of which this Auth Method is a part.

scope object

Output only. Scope information for this Auth method.

id string

The ID of the Scope.

type string

The type of the Scope.

name string

The name of the Scope, if any.

description string

The description of the Scope, if any.

parent_scope_id string

The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.

name string

Optional name for identification purposes.

description string

Optional user-set description for identification purposes.

created_time string

Output only. The time this resource was created.

updated_time string

Output only. The time this resource was last updated.

version integer

Version is used in mutation requests, after the initial creation, to ensure this resource has not changed. The mutation will fail if the version does not match the latest known good version.

type string

The Auth Method type.

attributes object

The attributes that are applicable for the specific Auth Method type.

is_primary boolean

Output only. Whether this auth method is the primary auth method for it's scope. To change this value update the primary_auth_method_id field on the scope.

authorized_actions string[]

authorized_collection_actions object

Output only. The authorized actions for the scope's collections.