GRgraypass
canonical

Read an authorization trace

Retrieve the stored authorization identified by the request path. To resolve a challenge or review child, fetch the resulting child authorization ID explicitly.

get/api/v1/authorizations/{authorization_id}

Request

  • Base URL
    https://app.graypass.org (the document declares no server; this is the origin it was published from)
  • URL
    https://app.graypass.org/api/v1/authorizations/{authorization_id}
  • Auth
    HTTP bearer

Path parameters

authorization_idstring required

Authorization identifier returned by a prior request or trusted challenge receipt.

Response

Full trace including original binding, parent relation and nested challenge/proof/review/outcome state.

actionstring required

Registered action key, such as payout.destination.change.

action_hashstring required

SHA-256 digest binding the canonical authorization material. Compare it with the hash computed from the original server-held request.

actorstring required

Bound human actor identifier.

actor_type'human' required

Bound actor category; only human is supported.

audiencestring required

Expected relying-party audience. It must be permitted by the action and independently known to the verifier.

context_digeststring required

Digest of the context binding. Render your independently retained business details for user confirmation.

decided_atstring required

Decision time as an ISO 8601 timestamp.

decision'allow' | 'challenge' | 'hold' | 'deny' required

Policy result: allow, challenge, hold or deny. Inspect mode and proof requirements before performing any business mutation.

idstring required

Identifier of this record. Treat it as opaque and retain it for subsequent operations.

latency_msinteger required

Server-recorded decision latency in milliseconds.

mode'test' | 'shadow' | 'enforce' required

Action evaluation mode. Test and shadow return decisions without enforceable proofs. An eligible enforce-mode allow can carry a proof.

outcomestring nullable

Business outcome reported by the customer application, with supporting evidence maintained by the customer.

outcome_reported_atstring nullable

Recorded business-outcome time as an ISO 8601 timestamp, or null.

parentstring nullable

Parent authorization identifier for a challenge or review child; null for an original request.

policy_versioninteger nullable

Immutable policy version number evaluated for this decision.

proof_idstring nullable

Proof identifier (jti), or null when no proof was issued.

reason_codesstring[] required

Stable reason identifiers explaining acceptance, limitations or a decision; resolve them in the reason-code catalog.

requested_atstring required

Recorded request time as an ISO 8601 timestamp in the trace, distinct from the caller’s Unix-seconds input.

resource_digeststring required

One-way digest of the resource binding.

resource_typestring required

Customer-defined category of the protected resource, such as merchant.

review_authorization_idstring nullable

Child authorization produced by an approved review, or null.

review_statusstring nullable

Recorded manual-review state, or null when no review occurred.

reviewed_atstring nullable

Manual-review time as an ISO 8601 timestamp, or null.

reviewed_bystring nullable

Identifier of the credential attributed to the manual review, or null.

subjectstring required

Pseudonymous subject identifier in the authenticated tenant and environment.

Changes

No recorded changes to this operation across all 1 revision of this API.