ComplianceReport

NIS2 / DORA compliance-evidence report generation and download.

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
POST	/api/v1/compliance/reports	Compliance Report Create	tenant:compliance.export
GET	/api/v1/compliance/reports/{reportId}	Compliance Report Status	tenant:compliance.export
GET	/api/v1/compliance/reports/{reportId}/download	Compliance Report Download	tenant:compliance.export

Operation details

POST /api/v1/compliance/reports

Compliance Report Create

• Operation ID: complianceReportCreate
• Required scopes: tenant:compliance.export

Request body (required): application/json → CreateReportRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/compliance/reports/{reportId}

Compliance Report Status

• Operation ID: complianceReportStatus
• Required scopes: tenant:compliance.export

Parameters:

Name	In	Required	Type	Description
reportId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/compliance/reports/{reportId}/download

Compliance Report Download

• Operation ID: complianceReportDownload
• Required scopes: tenant:compliance.export

Parameters:

Name	In	Required	Type	Description
reportId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)