hosting

GET `/v1/sites/{siteId}/application-access`

The sign-in details for the application installed on a site.

Autentifikacija

Pošaljite API ključ kao bearer token. Ova krajnja tačka ne navodi specifičnu dozvolu u specifikaciji, zato dodelite svom ključu minimum potrebnih ovlašćenja i proverite odgovor umesto da pretpostavljate.

Ovaj krajnji tačka ne prihvata ID organizacije. Vaš ključ već identifikuje organizaciju kojoj pripada, a odgovor je ograničen na nju.

Isprobajte

Zamenite bilo šta u uglastim zagradama sopstvenim vrednostima, a ključni placeholder sa ključem sa vaše kontrolne table.

curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/application-access \
  -H "Authorization: Bearer zdk_live_…"

Prijavljeni ste? API konzola na vašoj kontrolnoj tabli automatski popunjava ID vaše stvarne organizacije i vaš sopstveni ključ, i izvršava zahtev nad API-jem uživo tako da možete videti stvarni odgovor. Otvorite ovu krajnju tačku u API konzoli

Detalji

Everything a customer needs to sign in to the Nextcloud, ownCloud or headless CMS we installed for them: where to sign in, the administrator username, and the password. ⛔ The password is **derived, never stored** — the same design `GET /v1/sites/{siteId}/wp-credentials` uses (`engine.hosting.site_secrets`), so there is no per-site secret at rest to leak and a retried deploy re-derives the identical value. `can_reveal` is `false` when it cannot be shown: either the deployment has no master key configured, or the customer changed the password themselves, and the screen must say which rather than render an empty field. This read is audit-logged, because "who looked at this site's administrator password" is exactly the question an incident asks afterwards.

Parametri

Naziv	Vrsta	Obavezno	Šta je ovo
`siteId (path)`	`Uuid`	Da	Site ID (UUIDv7).

Odgovor

Naziv	Vrsta	Obavezno	Šta je ovo
`application`	`string`	Da	—
`name`	`string`	Da	—
`login_url`	`string`	Da	The full URL to sign in at.
`username`	`string`	Da	The administrator account the installer created.
`password`	`string`	Da	The administrator password, or `""` when it cannot be shown. Never stored — it is derived on read from the platform master key and the site's rotation epoch.
`can_reveal`	`boolean`	Da	Whether `password` holds a value that can be shown.
`is_custom`	`boolean`	Da	The customer set their own password, so there is nothing of ours to show. The screen says so rather than offering a reveal that would produce a blank.
`vendor_url`	`string`	Ne	—

Greške koje ovaj krajnji tačka može da vrati

401 · 403 · 404 · 429

GET /v1/sites/{siteId}/application-access