Identity Service

Port 11001 · 261 endpoints · micro-services/identity-service/

API Key

Method	Path	Summary
GET	`/admin/auth/api-keys`	管理员查询 API Key 列表	detail →
GET	`/admin/auth/api-keys/anomalies`	安全异常检测	detail →
POST	`/admin/auth/api-keys/batch-revoke`	批量吊销 API Key	detail →
POST	`/admin/auth/api-keys/cleanup-audit-logs`	清理旧审计日志	detail →
GET	`/admin/auth/api-keys/expiring`	获取即将过期的 API Key	detail →
GET	`/admin/auth/api-keys/stats`	管理员 API Key 统计	detail →
DELETE	`/admin/auth/api-keys/{id}/force`	管理员强制吊销 API Key	detail →
GET	`/auth/api-keys`	查询 API Key 列表	detail →
POST	`/auth/api-keys`	创建 API Key	detail →
DELETE	`/auth/api-keys/{id}`	吊销 API Key	detail →
GET	`/auth/api-keys/{id}`	获取 API Key 详情	detail →
GET	`/auth/api-keys/{id}/audit-logs`	获取 API Key 审计日志	detail →
POST	`/auth/api-keys/{id}/ip-restrictions`	添加 IP 限制	detail →
DELETE	`/auth/api-keys/{id}/ip-restrictions/{restriction_id}`	删除 IP 限制	detail →
POST	`/auth/api-keys/{id}/rotate`	轮换 API Key	detail →
PUT	`/auth/api-keys/{id}/scopes`	更新 API Key 权限范围	detail →
PUT	`/auth/api-keys/{id}/status`	启用/禁用 API Key	detail →
GET	`/auth/api-keys/{id}/usage`	获取 API Key 使用统计	detail →
GET	`/auth/api-keys/{id}/usage-stats`	获取 API Key 使用统计	detail →
POST	`/internal/identity/validate-key`	验证 API Key（内部）	detail →

Admin

Method	Path	Summary
GET	`/admin/users/{user_id}/oauth-connections`	管理员查看用户OAuth连接	detail →

Admin/Agents

Method	Path	Summary
GET	`/admin/agents`	List Agents	detail →
POST	`/admin/agents`	Create Agent	detail →
DELETE	`/admin/agents/{id}`	Revoke Agent	detail →
GET	`/admin/agents/{id}`	Get Agent	detail →
PUT	`/admin/agents/{id}`	Update Agent	detail →

Admin/IoTs

Method	Path	Summary
GET	`/admin/iots`	List Devices	detail →
POST	`/admin/iots`	Create Device	detail →
DELETE	`/admin/iots/{id}`	Revoke Device	detail →
GET	`/admin/iots/{id}`	Get Device	detail →

Admin/Robots

Method	Path	Summary
GET	`/admin/robots`	List Robots	detail →
POST	`/admin/robots`	Create Robot	detail →
DELETE	`/admin/robots/{id}`	Delete Robot	detail →
GET	`/admin/robots/{id}`	Get Robot	detail →
PUT	`/admin/robots/{id}`	Update Robot	detail →
POST	`/admin/robots/{id}/commission`	Commission Robot	detail →
POST	`/admin/robots/{id}/decommission`	Decommission Robot	detail →
POST	`/admin/robots/{id}/intent`	Issue Intent Token	detail →
POST	`/admin/robots/{id}/intent/revoke`	Revoke Intent Token	detail →

IoTs

Method	Path	Summary
GET	`/iots`	List User Devices	detail →
POST	`/iots/pair`	Pair Device	detail →
DELETE	`/iots/{id}`	Unpair Device	detail →
POST	`/iots/{id}/transfer`	Transfer Device	detail →

NHI管理

Method	Path	Summary
GET	`/admin/policies/nhi`	获取NHI策略	detail →
PUT	`/admin/policies/nhi`	更新NHI策略	detail →

OAuth

Method	Path	Summary
GET	`/admin/users/{user_id}/oauth-connections`	管理员查看用户OAuth连接	detail →

OAuth授权

Method	Path	Summary
POST	`/auth/oidc/backchannel-logout`	OIDC后通道登出	detail →
POST	`/auth/oidc/logout`	RP发起登出	detail →
GET	`/auth/oidc/session-iframe`	OIDC会话状态iframe	detail →

SAML

Method	Path	Summary
POST	`/saml/{provider_id}/acs`	断言消费服务	detail →
GET	`/saml/{provider_id}/login`	SP-initiated SSO	detail →
GET	`/saml/{provider_id}/metadata`	获取SP元数据	detail →
GET	`/saml/{provider_id}/slo`	单点登出	detail →
GET	`/saml/{provider_id}/slo/sp`	SP发起的SAML单点登出	detail →

SAML Admin

Method	Path	Summary
GET	`/admin/saml/providers`	列出SAML IdP	detail →
POST	`/admin/saml/providers`	注册SAML IdP	detail →
DELETE	`/admin/saml/providers/{id}`	删除SAML IdP	detail →
GET	`/admin/saml/providers/{id}`	获取SAML IdP详情	detail →
PUT	`/admin/saml/providers/{id}`	更新SAML IdP	detail →
PUT	`/admin/saml/providers/{id}/attribute-mapping`	更新属性映射	detail →

SCIM

Method	Path	Summary
GET	`/scim/Groups`	列出SCIM组	detail →
POST	`/scim/Groups`	创建SCIM组	detail →
DELETE	`/scim/Groups/{id}`	删除SCIM组	detail →
GET	`/scim/Groups/{id}`	获取SCIM组	detail →
PATCH	`/scim/Groups/{id}`	部分更新SCIM组	detail →
PUT	`/scim/Groups/{id}`	更新SCIM组	detail →
GET	`/scim/ResourceTypes`	SCIM资源类型	detail →
GET	`/scim/Schemas`	SCIM Schemas	detail →
GET	`/scim/ServiceProviderConfig`	SCIM服务提供商配置	detail →
GET	`/scim/Users`	列出SCIM用户	detail →
POST	`/scim/Users`	创建SCIM用户	detail →
DELETE	`/scim/Users/{id}`	删除SCIM用户	detail →
GET	`/scim/Users/{id}`	获取SCIM用户	detail →
PATCH	`/scim/Users/{id}`	部分更新SCIM用户	detail →
PUT	`/scim/Users/{id}`	更新SCIM用户	detail →

WebAuthn

Method	Path	Summary
GET	`/auth/me/webauthn-credentials`	获取已注册的Passkey列表	detail →
DELETE	`/auth/me/webauthn-credentials/{id}`	删除Passkey	detail →
POST	`/auth/webauthn/authenticate/begin`	开始Passkey公开认证	detail →
POST	`/auth/webauthn/authenticate/complete`	完成Passkey公开认证	detail →
POST	`/auth/webauthn/login/begin`	开始Passkey登录	detail →
POST	`/auth/webauthn/login/complete`	完成Passkey登录	detail →
POST	`/auth/webauthn/register/begin`	开始Passkey注册	detail →
POST	`/auth/webauthn/register/complete`	完成Passkey注册	detail →

internal

Method	Path	Summary
POST	`/internal/seed-provider`	Seed SAML provider (dev only)	detail →

会话与设备

Method	Path	Summary
GET	`/auth/me/authenticator/backup`		detail →
POST	`/auth/me/authenticator/backup`		detail →
DELETE	`/auth/me/authenticator/backup/{id}`		detail →
GET	`/auth/me/authenticator/devices`		detail →
DELETE	`/auth/me/authenticator/devices/{id}`	移除认证器设备	detail →
POST	`/auth/qr-login/cancel`	取消二维码登录	detail →
POST	`/auth/qr-login/confirm`	确认二维码登录	detail →
POST	`/auth/qr-login/initiate`	发起二维码登录	detail →
POST	`/auth/qr-login/scan`	扫描二维码登录	detail →
GET	`/auth/qr-login/status`	查询二维码登录状态	detail →
DELETE	`/devices`	移除所有设备	detail →
GET	`/devices`	获取用户设备列表	detail →
DELETE	`/devices/{id}`	移除设备	detail →
PUT	`/devices/{id}/trust`	信任/取消信任设备	detail →

多因素认证

Method	Path	Summary
POST	`/auth/mfa/verify-challenge`	验证MFA挑战	detail →

安全

Method	Path	Summary
GET	`/admin/security/risk-events`	风险事件列表	detail →
GET	`/admin/security/risk-events/aggregation`	风险事件聚合	detail →

安全策略

Method	Path	Summary
GET	`/admin/security/auth-config`	获取认证配置	detail →
PUT	`/admin/security/auth-config`	更新认证配置	detail →
GET	`/admin/security/password-policy`	获取密码策略	detail →
PUT	`/admin/security/password-policy`	更新密码策略	detail →
GET	`/admin/security/password-stats`	获取密码统计	detail →

未成年人管理

Method	Path	Summary
POST	`/admin/users/{user_id}/children-consent/deny`	拒绝儿童同意	detail →
POST	`/admin/users/{user_id}/children-consent/verify`	验证儿童同意	detail →

角色权限

Method	Path	Summary
GET	`/admin/abac-policies`	查询ABAC策略列表	detail →
POST	`/admin/abac-policies`	创建ABAC策略	detail →
DELETE	`/admin/abac-policies/{id}`	删除ABAC策略	detail →
GET	`/admin/abac-policies/{id}`	获取ABAC策略详情	detail →
PUT	`/admin/abac-policies/{id}`	更新ABAC策略	detail →
POST	`/admin/relationships/check`	检查关系权限	detail →
GET	`/admin/relationships/expand`	展开关系树	detail →
GET	`/admin/role-activations`	查询角色激活记录	detail →
POST	`/admin/role-activations/{id}/approve`	批准角色激活	detail →
POST	`/admin/role-activations/{id}/revoke`	撤销角色激活	detail →
GET	`/auth/me/role-activations`	查询我的角色激活	detail →
POST	`/auth/me/role-activations`	请求角色激活	detail →
POST	`/internal/pim/cleanup-expired`	清理过期角色激活	detail →

认证策略管理

Method	Path	Summary
GET	`/admin/auth-policies`	获取租户认证策略列表	detail →
DELETE	`/admin/auth-policies/{tenant_id}`	删除租户认证策略	detail →
GET	`/admin/auth-policies/{tenant_id}`	获取租户认证策略	detail →
PUT	`/admin/auth-policies/{tenant_id}`	更新租户认证策略	detail →

账户管理

Method	Path	Summary
POST	`/admin/impersonate`	管理员模拟用户登录	detail →
GET	`/admin/users`	查询用户列表	detail →
POST	`/admin/users`	创建用户	detail →
POST	`/admin/users/batch`	批量创建用户	detail →
POST	`/admin/users/batch/status`	批量更新用户状态	detail →
POST	`/admin/users/merge`	合并用户	detail →
DELETE	`/admin/users/{user_id}`	删除用户	detail →
GET	`/admin/users/{user_id}`	获取用户详情	detail →
PUT	`/admin/users/{user_id}`	更新用户信息	detail →
POST	`/admin/users/{user_id}/account-unlocks`	解锁账户	detail →
GET	`/admin/users/{user_id}/identities`	获取用户身份列表	detail →
POST	`/admin/users/{user_id}/identities`	添加用户身份	detail →
DELETE	`/admin/users/{user_id}/identities/{identity_id}`	移除用户身份	detail →
PUT	`/admin/users/{user_id}/identities/{identity_id}/set-primary`	设置主身份	detail →
POST	`/admin/users/{user_id}/identities/{identity_id}/verifications`	验证用户身份	detail →
POST	`/admin/users/{user_id}/impersonate`	管理员模拟用户	detail →
GET	`/admin/users/{user_id}/login-histories`	获取登录历史	detail →
GET	`/admin/users/{user_id}/security-status`	获取安全状态	detail →
PUT	`/admin/users/{user_id}/status`	更新用户状态	detail →
DELETE	`/auth/me`	停用当前账户	detail →
GET	`/auth/me/audit-logs`	获取我的审计日志	detail →
GET	`/auth/me/children-consent`	获取儿童隐私同意状态	detail →
DELETE	`/auth/me/consent`	撤销用户同意	detail →
POST	`/auth/me/consent`	记录用户同意	detail →
GET	`/auth/me/consent-history`	获取同意历史记录	detail →
POST	`/auth/me/delete-account`	永久删除账户 (GDPR 被遗忘权/账户删除)	detail →
GET	`/auth/me/devices`	获取我的设备列表	detail →
DELETE	`/auth/me/devices/{device_id}`	移除设备	detail →
PUT	`/auth/me/devices/{device_id}/trust`	信任/取消信任设备	detail →
POST	`/auth/me/email/change`	变更邮箱地址	detail →
POST	`/auth/me/email/verify`	验证邮箱变更	detail →
POST	`/auth/me/export-data`	导出我的数据 (GDPR DSAR)	detail →
GET	`/auth/me/memberships`	获取我的租户成员状态	detail →
POST	`/auth/me/phone/change`	变更手机号	detail →
POST	`/auth/me/phone/verify`	验证手机号变更	detail →
GET	`/auth/me/recovery-contacts`	获取恢复联系人列表	detail →
POST	`/auth/me/recovery-contacts`	添加恢复联系人	detail →
DELETE	`/auth/me/recovery-contacts/{contact_id}`	移除恢复联系人	detail →
GET	`/auth/me/saml-links`	获取SAML关联账户列表	detail →
DELETE	`/auth/me/saml-links/{id}`	解绑SAML关联账户	detail →
GET	`/auth/me/security-events`	获取安全事件列表	detail →
POST	`/auth/me/security-events/{event_id}/dismiss`	关闭安全事件提醒	detail →
DELETE	`/auth/me/sessions`	登出所有会话	detail →
GET	`/auth/me/sessions`	获取我的会话列表	detail →
DELETE	`/auth/me/sessions/{session_id}`	登出指定会话	detail →
POST	`/auth/me/stop-impersonation`	结束模拟会话	detail →
DELETE	`/internal/identity/erase-user/{user_id}`	内部硬删除用户	detail →
POST	`/internal/maker-checker/record`	记录双人复核	detail →

身份提供商

Method	Path	Summary
GET	`/admin/identity-providers`	列出身份提供商	detail →
POST	`/admin/identity-providers`	创建身份提供商	detail →
POST	`/admin/identity-providers/import-oidc-discovery`	导入OIDC Discovery	detail →
POST	`/admin/identity-providers/import-saml-metadata`	导入SAML Metadata	detail →
DELETE	`/admin/identity-providers/{id}`	删除身份提供商	detail →
GET	`/admin/identity-providers/{id}`	获取身份提供商详情	detail →
PUT	`/admin/identity-providers/{id}`	更新身份提供商	detail →
POST	`/admin/identity-providers/{id}/activate`	启用身份提供商	detail →
GET	`/admin/identity-providers/{id}/attribute-mapping`	获取属性映射	detail →
PUT	`/admin/identity-providers/{id}/attribute-mapping`	更新属性映射	detail →
GET	`/admin/identity-providers/{id}/certificates`	列出证书	detail →
POST	`/admin/identity-providers/{id}/certificates`	上传证书	detail →
DELETE	`/admin/identity-providers/{id}/certificates/{cert_id}`	删除证书	detail →
POST	`/admin/identity-providers/{id}/certificates/{cert_id}/rotate`	证书轮转	detail →
POST	`/admin/identity-providers/{id}/deactivate`	停用身份提供商	detail →
GET	`/admin/identity-providers/{id}/jit-config`	获取JIT配置	detail →
PUT	`/admin/identity-providers/{id}/jit-config`	更新JIT配置	detail →
GET	`/admin/identity-providers/{id}/stats`	获取提供商统计	detail →
POST	`/admin/identity-providers/{id}/test`	测试身份提供商连接	detail →
GET	`/admin/identity-providers/{id}/users`	获取提供商关联用户	detail →

身份认证

Method	Path	Summary
PUT	`/admin/users/{user_id}/password`	修改密码	detail →
POST	`/admin/users/{user_id}/password-resets`	重置密码	detail →
GET	`/admin/users/{user_id}/password-status`	获取用户密码状态	detail →
POST	`/auth/anonymous`	匿名认证	detail →
GET	`/auth/captcha/challenge`	获取CAPTCHA挑战	detail →
POST	`/auth/forgot-password`	忘记密码	detail →
POST	`/auth/generate-ticket`	生成一次性票据	detail →
POST	`/auth/id-token/signin`	ID Token登录	detail →
POST	`/auth/login`	用户登录	detail →
POST	`/auth/login/email-code`	邮箱验证码登录	detail →
POST	`/auth/login/phone-code`	手机验证码登录	detail →
GET	`/auth/magic-link/callback`	魔法链接回调 (GET→POST 双步跳转)	detail →
POST	`/auth/magic-link/callback`	魔法链接回调 (GET→POST 双步跳转)	detail →
POST	`/auth/magic-link/request`	请求发送魔法链接	detail →
GET	`/auth/me`	获取当前登录用户信息	detail →
PUT	`/auth/me`	更新当前用户信息	detail →
GET	`/auth/me/email-verification-status`	检查邮箱验证状态	detail →
PUT	`/auth/me/password`	修改当前用户密码	detail →
POST	`/auth/me/password-strength`	检查密码强度	detail →
GET	`/auth/me/permissions`	获取当前用户权限	detail →
GET	`/auth/me/phone-verification-status`	检查手机号验证状态	detail →
POST	`/auth/me/switch-tenant`	切换当前租户	detail →
GET	`/auth/me/tenants`	获取当前用户租户	detail →
GET	`/auth/oauth/accounts`	获取用户OAuth账号列表	detail →
POST	`/auth/oauth/bind`	绑定OAuth账号	detail →
GET	`/auth/oauth/providers`	获取OAuth提供商列表	detail →
POST	`/auth/oauth/unbind`	解绑OAuth账号	detail →
GET	`/auth/oauth/{provider}`	发起OAuth登录	detail →
GET	`/auth/oauth/{provider}/callback`	OAuth回调	detail →
POST	`/auth/re-authenticate`	重新认证（Step-up）	detail →
POST	`/auth/recover-account`	通过恢复联系人初始化账户恢复	detail →
POST	`/auth/recover-account/reset`	通过恢复码重置密码	detail →
POST	`/auth/recovery/complete`	完成账户恢复	detail →
POST	`/auth/recovery/request`	发起账户恢复	detail →
POST	`/auth/recovery/verify`	验证账户恢复码	detail →
POST	`/auth/refresh`	刷新访问令牌	detail →
POST	`/auth/register`	用户注册	detail →
GET	`/auth/register/check-email`	检查邮箱是否可用	detail →
POST	`/auth/register/check-email`	检查邮箱是否可用	detail →
GET	`/auth/register/check-username`	检查用户名是否可用	detail →
POST	`/auth/register/check-username`	检查用户名是否可用	detail →
POST	`/auth/register/email-code`	邮箱验证码注册	detail →
POST	`/auth/register/invitation`	邀请注册	detail →
POST	`/auth/register/oauth`	OAuth补充注册	detail →
POST	`/auth/register/phone-code`	手机验证码注册	detail →
POST	`/auth/register/reapply`	重新申请注册	detail →
POST	`/auth/resend-sms-code`	重新发送短信验证码	detail →
POST	`/auth/resend-verification-email`	重新发送邮箱验证邮件	detail →
POST	`/auth/reset-password`	重置密码	detail →
POST	`/auth/send-login-code`	发送登录验证码	detail →
POST	`/auth/send-sms-code`	发送短信验证码	detail →
POST	`/auth/send-verification-email`	发送邮箱验证邮件	detail →
POST	`/auth/sso/callback`	企业SSO回调	detail →
POST	`/auth/sso/initiate`	启动企业SSO登录	detail →
POST	`/auth/ticket/signin`	票据签名登录	detail →
POST	`/auth/verify-email`	验证邮箱地址	detail →
POST	`/auth/verify-phone`	验证手机号	detail →
POST	`/auth/verify-reset-code`	验证重置验证码	detail →
POST	`/auth/web3/verify`	验证Web3钱包签名	detail →
POST	`/internal/identity/verify-password`	验证密码	detail →
POST	`/internal/record-login-failure`	记录登录失败	detail →
POST	`/internal/record-login-success`	记录登录成功	detail →
GET	`/public/auth-config/by-domain/{domain}`	根据域名获取租户认证配置（公开）	detail →
GET	`/public/auth-config/by-identifier`	根据标识符发现租户	detail →
GET	`/public/auth-config/by-slug/{slug}`	根据租户标识获取认证配置（公开）	detail →
GET	`/public/auth-config/{tenant_id}`	获取租户认证配置（公开）	detail →
POST	`/public/password-strength`	检查密码强度（公开）	detail →
GET	`/public/tenants/discover`	发现公开可加入的租户	detail →

身份认证 - 内部接口

Method	Path	Summary
GET	`/public/key-exchange`	ECDH 密钥交换	detail →