Skip to main content

Authenticate with a context password

POST 

/nevisidm/api/auth/v1/:clientExtId/users/:userExtId/context-password/login

Since: 2.88.0

Required permission(s): AccessControl.CredentialView

Verifies the provided password against the context password credential identified by the given context string for the specified user.

The credential must exist for the given context, be in an active state, and within its validity period. A 200 response does not mean authentication succeeded, check the statusCode in the response body. Login failures (wrong password) are returned as statusCode 2 or higher within the 200 response body, not as HTTP errors. Pre-condition failures (credential not found, not active, expired) result in 4xx HTTP errors.

Request

Path Parameters

    clientExtId stringrequired

    External ID of the client.

    Example: client-123
    userExtId stringrequired

    External ID of the user.

    Example: user-123

Body

required
    password stringrequired

    Possible values: non-empty

    The password to be verified.

    context stringrequired

    Possible values: non-empty

    Credential's context.

Responses

Authentication attempt processed. Check the statusCode in the response body for the actual result.

Schema
    statusCode int32

    Numeric code indicating the authentication result. 2 = Failed, 3 = Failed (lock warning), 4 = Failed (now locked), 5 = Login Ok, 9 = Failed (now temporarily locked).

    description string

    Human-readable description of the authentication result.

Loading...