hosting
GET /v1/sites/{siteId}/application-access
The sign-in details for the application installed on a site.
Autentikasi
Kirimkan kunci API sebagai token bearer. Titik akhir ini tidak menyatakan izin tertentu dalam spesifikasi, jadi berikan kunci Anda izin minimum yang diperlukan dan periksa responsnya alih-alih berasumsi.
Endpoint ini tidak memerlukan id organisasi. Kunci Anda telah mengidentifikasi organisasi tempatnya berafiliasi, dan respons akan dibatasi untuk organisasi tersebut.
Coba
Ganti apa pun di dalam tanda kurung sudut dengan nilai Anda sendiri, dan placeholder kunci dengan kunci dari dasbor Anda.
curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/application-access \
-H "Authorization: Bearer zdk_live_…"Sudah masuk? Konsol API di dasbor Anda akan mengisi ID organisasi asli dan kunci Anda sendiri, serta menjalankan permintaan terhadap API langsung sehingga Anda dapat melihat respons aktualnya. Buka titik akhir ini di konsol API
Detail
Everything a customer needs to sign in to the Nextcloud, ownCloud or headless CMS we installed for them: where to sign in, the administrator username, and the password. ⛔ The password is **derived, never stored** — the same design `GET /v1/sites/{siteId}/wp-credentials` uses (`engine.hosting.site_secrets`), so there is no per-site secret at rest to leak and a retried deploy re-derives the identical value. `can_reveal` is `false` when it cannot be shown: either the deployment has no master key configured, or the customer changed the password themselves, and the screen must say which rather than render an empty field. This read is audit-logged, because "who looked at this site's administrator password" is exactly the question an incident asks afterwards.
Parameter
| Nama | Jenis | Wajib | Tentang apa ini |
|---|---|---|---|
siteId (path) | Uuid | Ya | Site ID (UUIDv7). |
Tanggapan
| Nama | Jenis | Wajib | Tentang apa ini |
|---|---|---|---|
application | string | Ya | — |
name | string | Ya | — |
login_url | string | Ya | The full URL to sign in at. |
username | string | Ya | The administrator account the installer created. |
password | string | Ya | The administrator password, or `""` when it cannot be shown. Never stored — it is derived on read from the platform master key and the site's rotation epoch. |
can_reveal | boolean | Ya | Whether `password` holds a value that can be shown. |
is_custom | boolean | Ya | The customer set their own password, so there is nothing of ours to show. The screen says so rather than offering a reveal that would produce a blank. |
vendor_url | string | Tidak | — |
Kesalahan yang dapat dikembalikan oleh titik akhir ini
401 · 403 · 404 · 429