Auth

Super-admin: enter a merchant

Changed on

Platform super-admin only (email on user_auth.super_admin_emails). From a standard session, mint a super_admin_view token scoped to any existing merchant — regardless of membership — while keeping the caller's own identity. Returns 403 if the caller is not a rostered super-admin, 404 if the merchant does not exist.

post/auth/super-admin/enter-merchant

Request

  • Base URL
    http://localhost:8080
  • URL
    http://localhost:8080/auth/super-admin/enter-merchant
  • Auth
    HTTP bearer

Request body

merchant_idstring required

The merchant whose dashboard to enter.

Example request

{
  "merchant_id": "merchant_demo"
}

Response

Session scoped to the target merchant

tokenstring
user_idstring
emailstring
merchant_idstring
rolestring

Changes