List sign-in methods and what they need

GET /ops/auth/providers

Whether each sign-in method is configured and, for the others, the environment variables to set (never their values). Setup steps: AUTH_PROVIDERS.md.

Authorization

bearer

Authorizationheader · stringrequired

Session token from POST /v1/auth/login with "transport": "bearer". Browsers use the session cookie that login sets instead.

Responses

errors: application/problem+json

200

401

Unauthorized

403

Forbidden

500

Internal Server Error

Match errors on the problem's code, which stays the same, not on its message.

Send a request

Server

Bearer token

The request goes from your browser straight to this server; nothing passes through this site. The API must allow this site's origin for CORS.

Requestexample

curl "$API_URL/ops/auth/providers" \
  -H "Authorization: Bearer $TOKEN"

req, err := http.NewRequestWithContext(ctx, http.MethodGet,
	apiURL + "/ops/auth/providers", nil)
if err != nil {
	return err
}
req.Header.Set("Authorization", "Bearer "+token)
res, err := http.DefaultClient.Do(req)
if err != nil {
	return err
}
defer res.Body.Close()

const res = await fetch(`${apiUrl}/ops/auth/providers`, {
  method: "GET",
  headers: {
    Authorization: `Bearer ${token}`,
  },
});
const data = await res.json();

Responseexample

{
  "methods": [
    {
      "enabled": false,
      "key": "passkeys",
      "name": "Passkeys in browsers",
      "detail": "string",
      "guide": "string",
      "missing": [
        "string"
      ]
    }
  ]
}

{
  "code": "string",
  "status": 401,
  "title": "Unauthorized",
  "detail": "string",
  "request_id": "req_9f86d081884c7d65",
  "type": "string"
}

{
  "code": "string",
  "status": 403,
  "title": "Forbidden",
  "detail": "string",
  "request_id": "req_9f86d081884c7d65",
  "type": "string"
}