hosting

GET /v1/sites/{siteId}/application-access

The sign-in details for the application installed on a site.

Svi hosting krajnji točke

Autentifikacija

Pošaljite API ključ kao bearer token. Ova krajnja točka ne navodi određenu dozvolu u specifikaciji, stoga dajte svom ključu najmanje što mu je potrebno i provjerite odgovor umjesto da pretpostavljate.

Ova krajnja točka ne prihvaća ID organizacije. Vaš ključ već identificira organizaciju kojoj pripada, a odgovor je ograničen na nju.

Isprobajte

Zamijenite sve unutar šiljastih zagrada svojim vlastitim vrijednostima, a rezervirano mjesto za ključ s ključem iz vaše nadzorne ploče.

curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/application-access \
  -H "Authorization: Bearer zdk_live_…"

Prijavljeni ste? API konzola na vašoj nadzornoj ploči automatski unosi stvarni ID vaše organizacije i vaš vlastiti ključ te šalje zahtjev prema aktivnom API-ju kako biste mogli vidjeti stvarni odgovor. Otvori ovu krajnju točku u API konzoli

Pojedinosti

Everything a customer needs to sign in to the Nextcloud, ownCloud or headless CMS we installed for them: where to sign in, the administrator username, and the password. ⛔ The password is **derived, never stored** — the same design `GET /v1/sites/{siteId}/wp-credentials` uses (`engine.hosting.site_secrets`), so there is no per-site secret at rest to leak and a retried deploy re-derives the identical value. `can_reveal` is `false` when it cannot be shown: either the deployment has no master key configured, or the customer changed the password themselves, and the screen must say which rather than render an empty field. This read is audit-logged, because "who looked at this site's administrator password" is exactly the question an incident asks afterwards.

Parametri

NazivVrstaObaveznoŠto je to
siteId (path)UuidDaSite ID (UUIDv7).

Odgovor

NazivVrstaObaveznoŠto je to
applicationstringDa
namestringDa
login_urlstringDaThe full URL to sign in at.
usernamestringDaThe administrator account the installer created.
passwordstringDaThe administrator password, or `""` when it cannot be shown. Never stored — it is derived on read from the platform master key and the site's rotation epoch.
can_revealbooleanDaWhether `password` holds a value that can be shown.
is_custombooleanDaThe customer set their own password, so there is nothing of ours to show. The screen says so rather than offering a reveal that would produce a blank.
vendor_urlstringNe

Pogreške koje ova krajnja točka može vratiti

401 · 403 · 404 · 429