身份验证
请将 API 密钥作为 bearer 令牌发送。该密钥必须具有 domains.dns.manage 权限;缺少该权限的密钥将被拒绝并返回 403 状态码,而非 404。
此端点不需要组织 ID。您的密钥已用于识别其所属的组织,且响应范围也仅限于该组织。
免费试用
将尖括号中的内容替换为您自己的值,并将键占位符替换为您仪表板中的一个键。
curl -X POST https://api.zinndigital.com/v1/domains/{domainId}/auth-code \
-H "Authorization: Bearer zdk_live_…"已登录?您仪表板中的 API 控制台会自动填入您真实的组织 ID 和您自己的密钥,并针对实时 API 运行请求,以便您查看实际的响应。 在 API 控制台中打开此端点
详细信息
Returns the domain's EPP/auth code, which **authorizes transferring the domain to another registrar**. It is fetched from the registrar on demand, returned once, and never stored or logged by us; the response is `no-store`. A `POST` deliberately, despite reading: revealing a credential must not be something a page load, a prefetch, a browser-history entry or a cache can trigger. The reveal is audit-logged (the code itself never is). Requires `domains.dns.manage`. **422 where the registrar publishes no auth-code endpoint at all** (the Cloudflare route). The refusal names the way out rather than simply declining — a customer is entitled to leave, so support fetches the code rather than the transfer being delayed.
参数
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
domainId (path) | Uuid | 是 | The domain's id. |
响应
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
auth_code | string | 是 | The EPP/auth code. **A credential** — it authorizes moving the domain to another registrar. Do not store, log or display it beyond the confirmation that requested it. |
expires_at | string | 是 | How long to treat the displayed code as current. A presentation bound, not a promise of invalidation — most registrars do not publish a real lifetime. |
此端点可能返回的错误
401 · 403 · 404 · 422 · 429 · 503