Skip to content

Order Management System REST API - Identity Controller

The identity/for/$/$ URI provides access to permissions for a specific identity.

For a JWT, the corresponding identity code has two options:

  • A Client Access Token results in an identity code Client:<client_id>, where th.
  • A User Access Token results in an identity code User:<sub>.

An Identity identifier is typically the sub property on the access token, or on a client token, the client_id property.

GET /identity/for/<source>/<identity>

Retrieves the registered permissions for this identity.

Requires the Admin feature permission.

ParameterDescription
sourceA URL-encoded Identity Source name.
identityA URL-encoded Identity code.
CodeStatusDescription
200SuccessContent is a single Permissions object.
403FailureThe authenticated identity does not have the Admin permission.
404FailureNo permissions exist for this identity.

DELETE /identity/for/<source>/<identity>

Removes the registered permissions for this identity.

Requires the Admin feature permission.

ParameterDescription
sourceA URL-encoded Identity Source name.
identityA URL-encoded Identity code.
CodeStatusDescription
204SuccessUpdate completed successfully, or the update would make no changes.
403FailureThe authenticated identity does not have the Admin permission.
422FailureA failure occurred.
Content is a JSON array of one or more error codes describing the problem.