ConditionalAccessPolicy

The ConditionalAccessPolicy resource.

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
GET	/api/v1/clients/{clientId}/access-policies	Conditional Access Policy List	tenant:applications.read + tenant:clients.read
POST	/api/v1/clients/{clientId}/access-policies	Conditional Access Policy Create	tenant:applications.write + tenant:clients.write
GET	/api/v1/clients/{clientId}/access-policies/{id}	Conditional Access Policy Get	tenant:applications.read + tenant:clients.read
PATCH	/api/v1/clients/{clientId}/access-policies/{id}	Conditional Access Policy Update	tenant:applications.write + tenant:clients.write
DELETE	/api/v1/clients/{clientId}/access-policies/{id}	Conditional Access Policy Delete	tenant:applications.write + tenant:clients.write

Operation details

GET /api/v1/clients/{clientId}/access-policies

Conditional Access Policy List

• Operation ID: conditionalAccessPolicyList
• Required scopes: tenant:applications.read + tenant:clients.read

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

POST /api/v1/clients/{clientId}/access-policies

Conditional Access Policy Create

• Operation ID: conditionalAccessPolicyCreate
• Required scopes: tenant:applications.write + tenant:clients.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Request body (required): application/json → CreatePolicyRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/clients/{clientId}/access-policies/{id}

Conditional Access Policy Get

• Operation ID: conditionalAccessPolicyGet
• Required scopes: tenant:applications.read + tenant:clients.read

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string
id	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PATCH /api/v1/clients/{clientId}/access-policies/{id}

Conditional Access Policy Update

• Operation ID: conditionalAccessPolicyUpdate
• Required scopes: tenant:applications.write + tenant:clients.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string
id	path	yes	string

Request body (required): application/json → UpdatePolicyRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

DELETE /api/v1/clients/{clientId}/access-policies/{id}

Conditional Access Policy Delete

• Operation ID: conditionalAccessPolicyDelete
• Required scopes: tenant:applications.write + tenant:clients.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string
id	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)