Skip to main content

Authenticate with a device password

POST 

/nevisidm/api/auth/v1/:clientExtId/users/:userExtId/device-password/login

Since: 2.88.0

Required permission(s): AccessControl.CredentialView

Verifies the provided password against the device password credential identified by its external ID for the specified user.

The credential must exist with the given external ID under the user, be in an active state, and within its validity period. A 200 response does not mean authentication succeeded, check the statusCode in the response body. Login failures (wrong password) are returned as statusCode 2 or higher within the 200 response body, not as HTTP errors. Pre-condition failures (credential not found, not active, expired) result in 4xx HTTP errors.

Request

Path Parameters

    clientExtId stringrequired

    External ID of the client.

    Example: client-123
    userExtId stringrequired

    External ID of the user.

    Example: user-123

Body

required
    password stringrequired

    Possible values: non-empty

    The password to be verified.

    credentialExtId stringrequired

    Possible values: non-empty

    Credential's external identifier (device identifier).

Responses

Authentication attempt processed. Check the statusCode in the response body for the actual result.

Schema
    statusCode int32

    Numeric code indicating the authentication result. 2 = Failed, 3 = Failed (lock warning), 4 = Failed (now locked), 5 = Login Ok, 9 = Failed (now temporarily locked).

    description string

    Human-readable description of the authentication result.

Loading...