API BaaSAuth

Describe the authenticated caller

Returns the identity behind the token and every tenant/role assigned to it. Useful to confirm which client_id, scopes and X-Tenant-Id values a credential is allowed to use.

For an M2M (client-credentials) token, sub and clientId hold the same value.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Headers

X-Tenant-IdstringRequired
Tenant context used for authorization and routing.

Response

Caller described.
substring

Token sub claim. Equals clientId for M2M credentials.

tenantRoleslist of objects
emailstringOptional
clientIdstringOptional
scopeslist of stringsOptional

Errors

401
Unauthorized Error
500
Internal Server Error