---
title: "Identity Platform blocking hook: beforeCreate"
method: POST
path: "/api/auth/blocking/before-create"
tags: ["auth"]
---

# Identity Platform blocking hook: beforeCreate

`POST /api/auth/blocking/before-create`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/auth/blocking/before-create`
- Auth: none declared

Called by Identity Platform only (ADR-0051). The JWT in the body is the credential: Google-signed, issuer = this project, audience = the registered function URI. Answers 200 `{}` to allow and 403 `{error:{status:"PERMISSION_DENIED",message:"wizbi:<code>"}}` to refuse. Off by default (`AUTH_BLOCKING_CREATE` / `AUTH_BLOCKING_SIGN_IN`).

## Request body

- AuthBlockingRequest
  - `data` object, required
    - `jwt` string, required

## Response `200`

Allowed (or, with the peer header, this environment's decision).

## Other responses

- `400`: No JWT in the body.
- `401`: Not a genuine Identity Platform blocking token of this project.
- `403`: Refused: `wizbi:<code>` in `error.message`.

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)