hosting
GET /v1/sites/{siteId}/application-access
The sign-in details for the application installed on a site.
身份验证
请将 API 密钥作为 bearer 令牌发送。此端点在规范中未指明具体的权限,因此请为您的密钥赋予所需的最小权限,并通过检查响应来确认,而不是盲目假设。
此端点不需要组织 ID。您的密钥已用于识别其所属的组织,且响应范围也仅限于该组织。
免费试用
将尖括号中的内容替换为您自己的值,并将键占位符替换为您仪表板中的一个键。
curl -X GET https://api.zinndigital.com/v1/sites/{siteId}/application-access \
-H "Authorization: Bearer zdk_live_…"已登录?您仪表板中的 API 控制台会自动填入您真实的组织 ID 和您自己的密钥,并针对实时 API 运行请求,以便您查看实际的响应。 在 API 控制台中打开此端点
详细信息
Everything a customer needs to sign in to the Nextcloud, ownCloud or headless CMS we installed for them: where to sign in, the administrator username, and the password. ⛔ The password is **derived, never stored** — the same design `GET /v1/sites/{siteId}/wp-credentials` uses (`engine.hosting.site_secrets`), so there is no per-site secret at rest to leak and a retried deploy re-derives the identical value. `can_reveal` is `false` when it cannot be shown: either the deployment has no master key configured, or the customer changed the password themselves, and the screen must say which rather than render an empty field. This read is audit-logged, because "who looked at this site's administrator password" is exactly the question an incident asks afterwards.
参数
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
siteId (path) | Uuid | 是 | Site ID (UUIDv7). |
响应
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
application | string | 是 | — |
name | string | 是 | — |
login_url | string | 是 | The full URL to sign in at. |
username | string | 是 | The administrator account the installer created. |
password | string | 是 | The administrator password, or `""` when it cannot be shown. Never stored — it is derived on read from the platform master key and the site's rotation epoch. |
can_reveal | boolean | 是 | Whether `password` holds a value that can be shown. |
is_custom | boolean | 是 | The customer set their own password, so there is nothing of ours to show. The screen says so rather than offering a reveal that would produce a blank. |
vendor_url | string | 否 | — |
此端点可能返回的错误
401 · 403 · 404 · 429