Baler Auth API
string · requiredstring · requiredstring · enum · requiredstring[]string · enumstring | nullstring | null
string · requiredstring · requiredstring
Login, logout, "who am I".
Revoke the caller's own token, if revocable
POST
http://localhost:8080/auth
/logout
Only meaningful for kind: "api_key" tokens (added to the revocation denylist). Session tokens are short-lived enough that this is a no-op for them - always returns 204 either way.
Revoke the caller's own token, if revocable › Responses
Always, whether or not there was anything to revoke.
No data returned
Decode and return the caller's own token claims
GET
http://localhost:8080/auth
/me
Decode and return the caller's own token claims › Responses
The caller's identity.
suborg_idroleEnum values:
admin
operator
viewer
service
site_idskindEnum values:
session
api_key
emailThe login's email; null for an API key.
display_nameHow the login signs (set by an admin); null when unset or for an API key.
Change your own password
POST
http://localhost:8080/auth
/me/password
Any logged-in user (session tokens only, not API keys). Ends all of your sessions, this one included, and returns a fresh token.
Change your own password › Request Body
current_passwordnew_passwordChange your own password › Responses
Changed; use the returned token from now on.
token