Dsar

GDPR Article 15 data-subject access requests (execute + fetch results).

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
POST	/api/v1/dsar	Dsar Create	tenant:dsar.execute
GET	/api/v1/dsar/{requestId}	Dsar Status	tenant:dsar.read
GET	/api/v1/dsar/{requestId}/bundle	Dsar Bundle	tenant:dsar.read

Operation details

POST /api/v1/dsar

Dsar Create

• Operation ID: dsarCreate
• Required scopes: tenant:dsar.execute

Request body (required): application/json → CreateDsarRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/dsar/{requestId}

Dsar Status

• Operation ID: dsarStatus
• Required scopes: tenant:dsar.read

Parameters:

Name	In	Required	Type	Description
requestId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/dsar/{requestId}/bundle

Dsar Bundle

• Operation ID: dsarBundle
• Required scopes: tenant:dsar.read

Parameters:

Name	In	Required	Type	Description
requestId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)