POST/api/auth/sso/exchange

Danho rekupedzisira reSSO login (SAML/OIDC): rinochinjanisa kodhi inoshandiswa kamwe chete yakapihwa necallback ne-session JWT yakajairwa.

Peji rinonzi “POST /api/auth/sso/exchange — Rondedzero yeAPI” rinobata nzvimbo yebasa inodudzwa muURL. Zviri mukati zviripo zvinowedzerwa nemaitiro chaiwo, zvinodiwa pamberi nemiganhu inozivikanwa. Zentor haina sisitimu yemakiyi eAPI evagadziri. PaDashboard panoshandiswa maJWT esession anoshanda kwemaawa gumi nemaviri nemarefresh token anoshanda kwemazuva manomwe; TOTP neSSO hazvimanikidzwi. MaWidget embed token anoratidzwa kamwe chete nemashoko akajeka uye akasungirirwa kumaOrigin akabvumidzwa. Gwaro re`POST /api/auth/sso/exchange` rinofanira kuverengwa zvinosunga setsananguro yehunyanzvi yeendpoint iyi chaiyo. Zvinokosha inzira (method), path, kusimbiswa, minda inomanikidzwa, zvikanganiso zvinogona kuitika nemubvunzo wekuti kufona zvakare kunoita mhedzisiro imwe chete here. Nokudaro chikamu ichi cherubatsiro https://zentor-app.de/hilfe/api-referenz/auth/auth.sso_exchange hachifanirwe kuva nezvirevo zvekushambadza zvakajairika, asi nhanho dzekubatanidza dzinogona kuteverwa chete nemienzaniso yemhinduro ine humbowo. Kuti mufone `/api/auth/sso/exchange`, chikumbiro chinovakwa zvichienderana neregistry. Nzira dzeruzhinji hadzidi kiyi yeAPI yevagadziri yakajairika, nokuti Zentor haipi sisitimu yakadaro yemakiyi. Nzira dzeWidget dzakachengetedzwa, kune rimwe divi, dzinoshandisa embed token inoratidzwa kamwe chete pamwe nekuongororwa kweOrigin. Mamiriro eHTTP nezviri mukati meJSON zvinofanira kuongororwa pamwe chete; munda we`ok` wega hautsivi kugadzirisa zvikanganiso. Pakuedza `POST /api/auth/sso/exchange` panofanira kushandiswa zvirimo zvisingaratidze munhu. Data chairo revatengi, maUUID ekushanda zviri pamutemo, matoken esession nenguva chaidzo hazvifanirwe kuva mumienzaniso yeruzhinji. Muganhu unozivikanwa wepuratifomu yese zvikumbiro 2.000 mukati memaminitsi 15; muganhu wakasiyana weendpoint iyi hauna humbowo. Kufona kwePOST kusiri idempotent hakufanirwe kudzokororwa pasina kufunga mushure mekudambuka kwenetwork kusina kujeka. Zvikanganiso zvakajairika zvekubatanidza panzira iyi zvinokonzerwa neparameter dzinomanikidzwa dzisipo, mhando dzedata dzisiri dzo, makodhi ekamwe chete apera, maOrigin asina kubvumidzwa kana rekodhi isina kuitwa. Application inofanira kubata nyaya dzakadai zvakasiyana uye kunyora meseji yekukanganisa inodzoswa neendpoint, pasina kunyora zvakavanzika. Chikumbiro chabudirira chinosimbisa nhanho iyi yekugadzirisa chete, kwete kubudirira kweemail, kwekubhadhara kana kweSSO kunotevera pachazvo. Izvi zvakakosha zvakananga ku“POST /api/auth/sso/exchange”. Kuongororwa kwehunyanzvi kwepeji iri kunofanira kuvakirwa paregistry iri pasi pe`app/frontend/src/content/api-reference/` nenzira dzebackend dzakabatana nayo. Zvinyorwa zvemiedzo yeLive zvinogona kureva chete zvakanyatsoongororwa. Muedzo wakaipa (negative test) kana kufanana nemamwe makodhi hazvisi humbowo hwakazara hwekubudirira. Nokudaro paPOST /api/auth/sso/exchange — Rondedzero yeAPI panofanira kunyatsoparadzaniswa pakati pechimiro chakanyorwa, muedzo unozviitira nemaitiro eLive akaonekwa zvakachengeteka.

{"code":"<Kodhi yekamwe chete kubva muSSO callback redirect>"}

{"ok":true,"token":"<JWT>","refreshToken":"<Refresh-Token>"}