Platforma · auth.castomapi.com
Auth
Jedna tożsamość dla każdego produktu: logowanie, sesje, klienci OAuth, projekty i klucze unieważniania, które sprawdza każda usługa.
71 operacjiOpenAPI → dash-bcastomocastomUIcastomFlow
castomapi-auth to konto. Osoba rejestruje się raz — hasłem albo przez Google, GitHub lub Apple — i tę tożsamość rozpoznają dash-b, castomo, konsola operatorska i każda usługa castomAPI. Sesje to tokeny weryfikowane lokalnie przez pozostałe usługi, z unieważnieniem rozsyłanym do nich, więc wylogowana sesja umiera wszędzie naraz.
Jest też dostawcą OAuth: produkt zbudowany na platformie rejestruje klienta, wysyła użytkowników do castomAPI po zgodę i dostaje token ograniczony do własnego projektu. Projekty oddzielają najemców; użytkownik jednego projektu jest niewidoczny dla drugiego.
Operacje
| Metoda | Ścieżka | Opis |
|---|---|---|
| GET | /account | The account page |
| GET | /auth/{clientId}/forgot | Hosted forgot password screen |
| GET | /auth/{clientId}/reset | Hosted password reset screen |
| GET | /auth/{clientId}/sign-in | Hosted sign in screen |
| GET | /auth/{clientId}/sign-up | Hosted sign up screen |
| GET | /auth/{clientId}/verify | Hosted email verification screen |
| GET | /dashboard | Tenant dashboard |
| GET | /oauth/authorize | Authorization endpoint |
| POST | /oauth/authorize | Complete authorization after consent |
| GET | /oauth/logout | End session endpoint |
| POST | /oauth/token | Token endpoint |
| GET | /oauth/userinfo | UserInfo endpoint |
| GET | /v1/account | The signed-in account and its security settings |
| POST | /v1/account/mfa/confirm | Confirm two-factor and receive recovery codes |
| POST | /v1/account/mfa/disable | Turn two-factor off |
| POST | /v1/account/mfa/enrol | Begin turning two-factor on |
| POST | /v1/auth/change-password | Change password |
| POST | /v1/auth/forgot-password | Request a password reset link |
| POST | /v1/auth/guest-token | Mint a guest token for one castomapi-live room |
| POST | /v1/auth/login | Exchange credentials for a session |
| POST | /v1/auth/login/mfa | Finish signing in with a second factor |
| POST | /v1/auth/logout | End the current session |
| POST | /v1/auth/logout-all | End every session for this user |
| DELETE | /v1/auth/me | Erase your account, irreversibly |
| GET | /v1/auth/me | Read the authenticated user |
| GET | /v1/auth/me/export | Download everything held about you |
| GET | /v1/auth/me/identities | List linked provider accounts |
| DELETE | /v1/auth/me/identities/{provider} | Unlink a provider account |
| GET | /v1/auth/me/logins | Recent sign-ins on your account |
| GET | /v1/auth/me/{namespace} | Read your own profile or settings |
| PATCH | /v1/auth/me/{namespace} | Update your own profile or settings |
| GET | /v1/auth/mfa | Whether two-factor is enabled on this account |
| POST | /v1/auth/mfa/confirm | Confirm enrolment and receive recovery codes |
| POST | /v1/auth/mfa/disable | Turn two-factor off |
| POST | /v1/auth/mfa/enrol | Begin enrolment |
| POST | /v1/auth/refresh | Rotate a refresh token |
| POST | /v1/auth/register | Create an account |
| POST | /v1/auth/resend-verification | Resend a verification email |
| POST | /v1/auth/reset-password | Redeem a reset link and set a new password |
| GET | /v1/auth/social/{clientId}/{provider}/callback | Provider callback |
| GET | /v1/auth/social/{clientId}/{provider}/start | Begin sign-in with an external provider |
| POST | /v1/auth/verify-email | Confirm an email address |
| POST | /v1/mail/test | Send a rendered template to the caller's own inbox |
| GET | /v1/members/ | List members of the active tenant |
| POST | /v1/members/change-password | Change your password |
| GET | /v1/members/invitations | List pending invitations |
| POST | /v1/members/invitations | Invite someone to this tenant |
| POST | /v1/members/invitations/accept | Accept an invitation |
| DELETE | /v1/members/invitations/{invitationId} | Revoke a pending invitation |
| POST | /v1/members/login | Sign in to the dashboard |
| POST | /v1/members/login/mfa | Finish signing in with a second factor |
| POST | /v1/members/logout | End this session |
| POST | /v1/members/logout-all | End every session for this account |
| GET | /v1/members/me | Who am I, and what may I do |
| GET | /v1/members/mfa | Whether two-factor is enabled, and codes remaining |
| POST | /v1/members/mfa/confirm | Confirm enrolment and receive recovery codes |
| POST | /v1/members/mfa/disable | Turn two-factor off |
| POST | /v1/members/mfa/enrol | Begin enrolment |
| POST | /v1/members/mfa/recovery-codes | Replace the recovery codes |
| POST | /v1/members/switch-tenant | Change which tenant this session acts on |
| DELETE | /v1/members/{memberId} | Remove someone from this tenant |
| PATCH | /v1/members/{memberId}/role | Change a member's role |
| GET | /v1/projects/{clientId}/auth-config | Branding and sign-up fields for the hosted screens |
| GET | /v1/projects/{clientId}/schema/{namespace} | Read a project's field definitions |
| GET | /v1/publishers/me | The publisher space this account owns, if any |
| POST | /v1/publishers/me | Create this account's publisher space, or return the existing one |
| POST | /v1/publishers/me/session | Exchange this end-user session for admin standing over your own space |
| DELETE | /v1/sso/session | End the single sign-on session |
| GET | /v1/sso/session | Report the current single sign-on session |
| POST | /v1/sso/session | Open the single sign-on session |
| POST | /v1/tenants | Sign up as a tenant |
Adres bazowy: https://auth.castomapi.com · Otwórz dokumentację na żywo
Platforma
Rozliczenia i plany
Uprawnienia planów dla każdego produktu castomo: subskrypcje Stripe na wejściu, obowiązujące limity na wyjściu, wypychane do produktu, który je egzekwuje.
Pay
Płatności między ludźmi i firmami na platformie, ze Stripe pod spodem.
Book
Rezerwacje i dostępność: zasoby, sloty, rezerwacje, przypomnienia i zwroty według polityki.
Events
Darmowe globalne API wydarzeń: co się dzieje gdzie, dla dashboardów i witryn, które potrzebują kalendarza, którego nie napisały.
Data
Darmowe globalne dane referencyjne: kraje, języki, waluty, logistyka, standardy — dziesiątki milionów rekordów, bez klucza.
Query
Zapytania SQL i dokumentowe tylko do odczytu na własnym MySQL, PostgreSQL albo MongoDB klienta, z przeglądarki, bezpiecznie.