v1

latestOpenAPI 3.1.02026-07-263644911022.4 KB

Authorization API

Validate User Permission

Use this endpoint to check if a user is allowed to perform a specific action on a resource. Typically used in M2M authentication with Midaz.

post/v1/authorize

Headers

Authorizationstring

Bearer JWT token for authentication. Required when PLUGIN_AUTH_ENABLED=true (enforced in multi-tenant deployments). Optional in default OSS single-tenant mode. Format: Bearer <token>

Request body

actionstring required

The operation being performed on the resource.

resourcestring required

The resource the action applies to, typically a service or domain within the system.

substring

Subject requesting access. Usually a midaz_role or a user_id. If not provided, it's extracted from the token.

Response

Indicates that the resource was successfully created and the operation was completed as expected.

authorizedboolean

If true, it indicates that the user is authorized to perform the action.

timestampstring date-time

The time when the permission was verified.