TokenClaims

Per-application token-claim enrichment configuration.

Base URL: https://api.stg.thoryn.org

Operations

Method	Path	Summary	Scopes
GET	/api/v1/applications/{clientId}/token-claims	Token Claims Get	tenant:applications.read
PUT	/api/v1/applications/{clientId}/token-claims	Token Claims Enable	tenant:applications.write
DELETE	/api/v1/applications/{clientId}/token-claims	Token Claims Disable	tenant:applications.write

Operation details

GET /api/v1/applications/{clientId}/token-claims

Token Claims Get

• Operation ID: tokenClaimsGet
• Required scopes: tenant:applications.read

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

PUT /api/v1/applications/{clientId}/token-claims

Token Claims Enable

• Operation ID: tokenClaimsEnable
• Required scopes: tenant:applications.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Request body: application/json → EnableTokenClaimsRequest

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)

DELETE /api/v1/applications/{clientId}/token-claims

Token Claims Disable

• Operation ID: tokenClaimsDisable
• Required scopes: tenant:applications.write

Parameters:

Name	In	Required	Type	Description
clientId	path	yes	string

Responses:

Status	Description	Body
200	OK	object
401	Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.	Problem (problem+json)
403	Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.	Problem (problem+json)