POST/api/auth/sso/exchange

Inyathelo lokugqibela le-SSO login (SAML/OIDC): itshintshisa ikhowudi yokusetyenziswa kube kanye ekhutshwe yi-callback ngeJWT yeseshoni eqhelekileyo.

Iphepha „POST /api/auth/sso/exchange — Isalathiso se-API“ lichaza icandelo lomsebenzi elichazwe kwi-URL. Umxholo okhoyo wongezwa ngenkqubo yokwenyani, iimfuno kunye nemida eyaziwayo. I-Zentor ayinayo inkqubo yezitshixo ze-API zabaphuhlisi. Kwidashibhodi kusetyenziswa ii-JWT zeseshoni ezisebenza iiyure ezilishumi elinesibini kunye nee-refresh token ezisebenza iintsuku ezisixhenxe; i-TOTP ne-SSO zikhethwa ngokuzithandela. Ii-widget embed token ziboniswa ngombhalo ocacileyo kanye kuphela kwaye zibotshelelwe kwii-origin ezivunyiweyo. Uxwebhu malunga ne-`POST /api/auth/sso/exchange` kufuneka lufundwe ngokubophelelayo njengenkcazelo yobuchwepheshe yale ndawo yokuphela ethile. Okubalulekileyo yi-method, i-path, ukuqinisekiswa, iintsimi ezinyanzelekileyo, iimpazamo ezinokwenzeka kunye nombuzo wokuba ingaba ukubizwa kwakhona kubangela isiphumo esifanayo na. Ngoko ke eli candelo loncedo https://zentor-app.de/hilfe/api-referenz/auth/auth.sso_exchange akufuneki libe neentetho zentengiso jikelele, kodwa kuphela amanyathelo odityaniso anokulandelwa kunye nemizekelo yeempendulo eqinisekisiweyo. Ukubiza i-`/api/auth/sso/exchange`, isicelo sakhiwa ngokwe-registry. Iindlela zoluntu azifuni sitshixo se-API sabaphuhlisi jikelele, kuba i-Zentor ayiniki nkqubo yezitshixo enjalo. Iindlela ze-widget ezikhuselweyo, ngokwahlukileyo, zisebenzisa i-embed token eboniswe kanye kunye nokuhlolwa kwe-origin. Isimo se-HTTP nomxholo we-JSON kufuneka zivavanywe kunye; intsimi ye-`ok` yodwa ayithathi indawo yokuphatha iimpazamo. Xa kuvavanywa i-`POST /api/auth/sso/exchange`, kufuneka kusetyenziswe amaxabiso angaziwayo. Idatha yabathengi yokwenyani, ii-UUID zemveliso, ii-token zeseshoni kunye nezitampu zexesha ezithile azifanelanga kwimizekelo yoluntu. Umda owaziwayo weqonga lonke zizicelo ezingama-2 000 kwimizuzu eli-15; umda owahlukileyo wendawo nganye awuqinisekiswanga. Ukubizwa kwe-POST okungeyo-idempotent akufuneki kuphindwe ngokungaboni emva kokuphazamiseka kwenethiwekhi okungacacanga. Iimpazamo eziqhelekileyo zodityaniso kule ndlela zibangelwa ziiparamitha ezinyanzelekileyo ezingekhoyo, iintlobo zedatha ezingalunganga, iikhowudi zesihlandlo esinye eziphelelwe lixesha, ii-origin ezingavumelekanga okanye irekhodi yedatha engaphunyezwanga. Isicelo kufuneka siziphathe ezi meko ngokwahlukeneyo kwaye sibhale kwilogi umyalezo wempazamo obuyiswe yindawo yokuphela, ngaphandle kokubhala umxholo oyimfihlo. Isicelo esiphumeleleyo siqinisekisa kuphela eli nyathelo lokucutshungulwa, hayi ngokuzenzekelayo impumelelo elandelayo ye-imeyile, yentlawulo okanye ye-SSO. Oku kubaluleke ngqo kwi-„POST /api/auth/sso/exchange“. Ukuhlolwa kobuchwepheshe kweli phepha kufuneka kuxhomekeke ngokunyanzelekileyo kwi-registry ekwi-`app/frontend/src/content/api-reference/` nakwiindlela ze-backend ezinxulumeneyo. Amanqaku ovavanyo oluphilayo angabanga kuphela oko kuhlolwe ngokwenene. Uvavanyo olubi (negative test) okanye ukufana kwekhowudi asibobungqina obupheleleyo bempumelelo. Ngoko ke kwi-POST /api/auth/sso/exchange — Isalathiso se-API kufuneka kwahlulwe ngokucacileyo phakathi kolwakhiwo olubhaliweyo, uvavanyo oluzenzekelayo nokuziphatha okuphilayo okubonwe ngokuqinisekileyo.

{"code":"<Ikhowudi yesihlandlo esinye evela kwi-SSO callback redirect>"}

{"ok":true,"token":"<JWT>","refreshToken":"<Refresh-Token>"}