Version: v1

• OpenAPI Spec

Nauthilus Management API

Contract for the stable protected machine-facing HTTP API subset. Dynamic custom hook aliases remain runtime configuration. Public IdP protocol and browser routes are documented by the public IdP contract.

Authentication

HTTP: Basic Auth

Dedicated Policy client credentials; never management Basic credentials.

Security Scheme Type:	http
HTTP Authorization Scheme:	basic

HTTP: Bearer Auth

Policy-resource Bearer token with nauthilus:policy_evaluate scope.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT

HTTP: Basic Auth

Backchannel Basic authentication.

Security Scheme Type:	http
HTTP Authorization Scheme:	basic

HTTP: Bearer Auth

Backchannel OIDC bearer token. Some admin endpoints require security or admin scope.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT