---
title: "Is (authorized)"
method: POST
path: "/api/v2/authz/is"
tags: ["Authorizer"]
---

# Is (authorized)

`POST /api/v2/authz/is`

## Request

- Base URL: `{{.Scheme}}://{{.Host}}`
- URL: `{{.Scheme}}://{{.Host}}/api/v2/authz/is`
- Auth: API key in header `authorization` and API key in header `aserto-tenant-id`
- TypeScript: <https://skmtc.dev/aserto/apis/authorizer/docs/api/v2/authz/is/post.ts> (a function with typed inputs; its response is checked against the schema)

Determines if identity context is authorized to access the resource guarded by the given policy.

## Request body

- V2IsRequest
  - `identity_context` ApiIdentityContext
    - `identity` string
    - `type` 'IDENTITY_TYPE_UNKNOWN' | 'IDENTITY_TYPE_NONE' | 'IDENTITY_TYPE_SUB' | 'IDENTITY_TYPE_JWT' | 'IDENTITY_TYPE_MANUAL': Identity types, describes the payload type of the identity field inside the IdentityContext message. - IDENTITY_TYPE_UNKNOWN: Unknown, value not set, requests will fail with identity type not set error. - IDENTITY_TYPE_NONE: None, no explicit identity context set, equals anonymous. - IDENTITY_TYPE_SUB: Sub(ject), identity field contains an oAUTH subject. - IDENTITY_TYPE_JWT: JWT, identity field contains a JWT access token. - IDENTITY_TYPE_MANUAL: Manual, propagates thw identity field as-is, without validation, into the input object.
  - `policy_context` ApiPolicyContext
    - `decisions` string[]
    - `path` string
  - `policy_instance` ApiPolicyInstance
    - `instance_label` string
    - `name` string
  - `resource_context` object

## Response `200`

A successful response.

- V2IsResponse
  - `decisions` Authorizerv2Decision[]
    - `decision` string
    - `is` boolean

## Other responses

- `default`: An unexpected error response.

## Changes

- **2024-09-10** `46b87f1b9aee`: 2 warning, 1 info
  - removed the optional property `details/items/type_url` from the response with the `default` status
  - removed the optional property `details/items/value` from the response with the `default` status
  - added the optional property `details/items/@type` to the response with the `default` status
- **2023-09-27** `f52e53b36c27`: 1 info
  - added the new `IDENTITY_TYPE_MANUAL` enum value to the request property `identity_context/type`
- **2023-03-01** `5e77eb88d218`: 2 info
  - the endpoint scheme security `AuthorizerAPIKey AND TenantID` was added to the API
  - the endpoint scheme security `AuthorizerAPIKey` was removed from the API
- **2023-02-22** `cfd9ed8f0ec7`: 2 warning, 3 info
  - removed the request property `policy_context/instance_label`
  - removed the request property `policy_context/name`
  - api tag `Authorizer` added
  - api tag `authorizer` removed
  - …1 more

[Operation history](https://skmtc.dev/aserto/apis/authorizer/changes/api/v2/authz/is/post.md)

---

[API](https://skmtc.dev/aserto/apis/authorizer.md) - [All operations](https://skmtc.dev/aserto/apis/authorizer/llms.txt) - [OpenAPI document](https://skmtc.dev/aserto/apis/authorizer/revisions/57ae81fc10b9?raw)