POST /api/v1/auth/spiffe-auth/login — infisical-api

latestOpenAPI 3.0.32026-08-222,282012.1 MB

c057052770f0

Alibaba Cloud Auth5

App Connections666

Audit Logs1

AWS Auth5

Azure Auth5

Dynamic Secrets11

Environments11

Event Subscriptions1

Folders25

Gateways4

GCP Auth5

Groups19

HSM Connectors7

Identities13

Identity Specific Privileges6

Identity Specific Privileges V26

Integrations15

JWT Auth5

KMS Encryption2

KMS Keys10

KMS Signing6

Kubernetes Auth5

LDAP Auth6

LDAP SSO3

OCI Auth5

OIDC Auth5

OIDC SSO3

Organization Identity Membership1

Organization Roles6

Organizations6

PKI ACME13

PKI Alerting9

PKI Applications37

PKI Certificate Authorities93

PKI Certificate Collections9

PKI Certificate Policies5

PKI Certificate Profiles18

PKI Certificate Templates16

PKI Certificates30

PKI Discovery9

PKI Installations4

PKI Signers34

PKI Subscribers11

PKI Syncs178

Project Groups16

Project Identities15

Project Identity Membership3

Project Roles11

Project Templates5

Project Users12

Projects12

Proxied Services6

SAML SSO3

SCIM2

Secret Imports12

Secret Rotations285

Secret Scanning37

Secret Sharing5

Secret Syncs434

Secret Validation Rules4

Secrets25

Service Tokens1

SPIFFE Auth6

Sub Organizations5

TLS Certificate Auth5

Token Auth9

Universal Auth12

SPIFFE Auth

post/api/v1/auth/spiffe-auth/login

Request body

identityIdstring required

The ID of the machine identity to login.

jwtstring required

The JWT-SVID token to authenticate with.

organizationSlugstring

When set, this will scope the login session to the specified organization the machine identity has access to. If omitted, the session defaults to the organization where the machine identity was created in.

Response

Default Response

accessTokenstring required

expiresInnumber required

accessTokenMaxTTLnumber required

tokenType'Bearer' required