SUsurrealdb

GET /api/v1/{context_id}/me

Changed on

Return the calling token's resolved identity, the principal's grants, the key's attenuating grants (if any), and the effective per-verb grants. Self-only; never requires grant:manage.

Request

Path parameters

context_idstring required

Spectron context id

Response

delegatedPrincipalIdstring nullable

When the token is delegating (X-Spectron-On-Behalf-Of), the target principal id; absent for non-delegated calls.

displayNamestring required

Human-readable display name.

effectiveGrantsGrants required

Per-verb scope pattern map. Keys are grant verbs in <noun>:<verb> form (memory:read, memory:write, memory:forget, scope:read, scope:create, scope:delete, grant:manage); values are arrays of scope patterns.

grantsGrants required

Per-verb scope pattern map. Keys are grant verbs in <noun>:<verb> form (memory:read, memory:write, memory:forget, scope:read, scope:create, scope:delete, grant:manage); values are arrays of scope patterns.

kindstring required

Principal kind (human/agent/service/unknown).

principalIdstring required

The token's principal id. Always a bound principal — an unbound key is rejected at authentication, so this is never a bare key id.

tokenGrantsGrants

Per-verb scope pattern map. Keys are grant verbs in <noun>:<verb> form (memory:read, memory:write, memory:forget, scope:read, scope:create, scope:delete, grant:manage); values are arrays of scope patterns.

Changes