LoginFlow

The LoginFlow resource.

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
POST	/api/v1/login-flows/activate	Login Flow Activate	tenant:idp.write
GET	/api/v1/login-flows/active	Login Flow Get Active	tenant:idp.read
GET	/api/v1/login-flows/assurance-methods	Login Flow Get Assurance Methods	tenant:idp.read
GET	/api/v1/login-flows/client-bindings	Login Flow List Client Bindings	tenant:idp.read
GET	/api/v1/login-flows/client-bindings/{clientId}	Login Flow Get Client Binding	tenant:idp.read
PUT	/api/v1/login-flows/client-bindings/{clientId}	Login Flow Put Client Binding	tenant:idp.write
DELETE	/api/v1/login-flows/client-bindings/{clientId}	Login Flow Delete Client Binding	tenant:idp.write
GET	/api/v1/login-flows/draft	Login Flow Get Draft	tenant:idp.read
PUT	/api/v1/login-flows/draft	Login Flow Put Draft	tenant:idp.write
POST	/api/v1/login-flows/simulate	Login Flow Simulate	tenant:idp.read
GET	/api/v1/login-flows/templates	Login Flow Get Templates	tenant:idp.read
POST	/api/v1/login-flows/templates/{templateId}/apply	Login Flow Apply Template	tenant:idp.write
GET	/api/v1/login-flows/versions	Login Flow Get Versions	tenant:idp.read

Operation details

POST /api/v1/login-flows/activate

Login Flow Activate

• Operation ID: loginFlowActivate
• Required scopes: tenant:idp.write

Request body (required): application/json → ActivateLoginFlowRequest

Responses:

Status	Description	Body
200	OK	LoginFlowDefinition
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/active

Login Flow Get Active

• Operation ID: loginFlowGetActive
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowDefinition
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/assurance-methods

Login Flow Get Assurance Methods

• Operation ID: loginFlowGetAssuranceMethods
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowAssuranceMethods
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/client-bindings

Login Flow List Client Bindings

• Operation ID: loginFlowListClientBindings
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowClientBinding[]
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/client-bindings/{clientId}

Login Flow Get Client Binding

• Operation ID: loginFlowGetClientBinding
• Required scopes: tenant:idp.read

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Responses:

Status	Description	Body
200	OK	LoginFlowClientBinding
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PUT /api/v1/login-flows/client-bindings/{clientId}

Login Flow Put Client Binding

• Operation ID: loginFlowPutClientBinding
• Required scopes: tenant:idp.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Request body (required): application/json → BindLoginFlowClientRequest

Responses:

Status	Description	Body
200	OK	LoginFlowClientBinding
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

DELETE /api/v1/login-flows/client-bindings/{clientId}

Login Flow Delete Client Binding

• Operation ID: loginFlowDeleteClientBinding
• Required scopes: tenant:idp.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Responses:

Status	Description	Body
204	The binding was removed.	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/draft

Login Flow Get Draft

• Operation ID: loginFlowGetDraft
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowDefinition
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PUT /api/v1/login-flows/draft

Login Flow Put Draft

• Operation ID: loginFlowPutDraft
• Required scopes: tenant:idp.write

Request body (required): application/json → LoginFlowDefinition

Responses:

Status	Description	Body
200	OK	LoginFlowDefinition
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

POST /api/v1/login-flows/simulate

Login Flow Simulate

• Operation ID: loginFlowSimulate
• Required scopes: tenant:idp.read

Request body (required): application/json → SimulateLoginFlowRequest

Responses:

Status	Description	Body
200	OK	LoginFlowSimulation
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/templates

Login Flow Get Templates

• Operation ID: loginFlowGetTemplates
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowTemplate[]
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

POST /api/v1/login-flows/templates/{templateId}/apply

Login Flow Apply Template

• Operation ID: loginFlowApplyTemplate
• Required scopes: tenant:idp.write

Parameters:

Name	In	Required	Type	Description
templateId	path	yes	string

Responses:

Status	Description	Body
200	OK	LoginFlowDefinition
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

GET /api/v1/login-flows/versions

Login Flow Get Versions

• Operation ID: loginFlowGetVersions
• Required scopes: tenant:idp.read

Responses:

Status	Description	Body
200	OK	LoginFlowVersionSummary[]
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)