{
  "opencollection": "1.0.0",
  "info": {
    "name": "Dfns Approvals Auth API",
    "version": "1.0"
  },
  "request": {
    "auth": {
      "type": "bearer",
      "token": "{{bearerToken}}"
    }
  },
  "items": [
    {
      "info": {
        "name": "Auth",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Initialize a User Action Signing challenge",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dfns.io/auth/action/init",
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Starts the User Action Signing flow for a sensitive operation, returning a challenge the client must sign with its credential."
        },
        {
          "info": {
            "name": "Complete a User Action Signing challenge",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dfns.io/auth/action",
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Submits the signed challenge and returns a User Action Signature token to pass in the X-DFNS-USERACTION header of the sensitive request."
        },
        {
          "info": {
            "name": "Complete a user login",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dfns.io/auth/login",
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Exchanges signed login credentials for an access token."
        },
        {
          "info": {
            "name": "Delegated login",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dfns.io/auth/login/delegated",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Allows a service account to obtain a scoped access token on behalf of an end user for delegated (end-user-controlled) signing flows. Requires a User Action Signature."
        },
        {
          "info": {
            "name": "List users",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://api.dfns.io/auth/users"
          },
          "docs": "List users"
        },
        {
          "info": {
            "name": "Create a user",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "https://api.dfns.io/auth/users",
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "bearer",
              "token": "{{bearerToken}}"
            }
          },
          "docs": "Create a user"
        }
      ]
    }
  ],
  "bundled": true
}