Vendors
Get a vendor's SSO capabilities
Changed onFull auth capabilities for one vendor — flows, scopes, classifications.
Never returns client_secret (authorization-code flow's secret is stripped at response build time). UnknownVendorError maps to a 404 problem detail via the handler registered in control/web/app.py.
get/vendors/{vendor_key}/auth-capabilities
Request
- Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
- URL: /vendors/{vendor_key}/auth-capabilities
- Auth: HTTP bearer
Path parameters
vendor_keystring required
Query parameters
oauth_app_registration_idstring nullable
Pin to a specific admin-registered OAuth app when the vendor has more than one. Returns that registration's scopes + client_id, so the picker's tile and the connect payload stay aligned.
Response
Successful Response
unknown required
Changes
- info
added the new optional
queryrequest parameteroauth_app_registration_id
- info
- info
endpoint added
- info