Complete from the subject's own session with fresh native PAM authentication and Account validation; direct TLS required. Returns public mapping metadata only.

POST

/v1/auth/os-account-bindings/complete

curl --request POST \
  --url https://example.com/v1/auth/os-account-bindings/complete \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "ceremony_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "password": "example" }'

• this engine

Completes one ceremony from the selected user own native product session with fresh PAM authentication and separate Account validation. The request password uses base64 byte encoding and is discarded; the reply contains only public mapping metadata and an audit digest.

Authorizations

• bearerAuth
• browserSession

Request Body ^required

Media type application/json

object

ceremony_id

required

string format: uuid

password

required

Base64-encoded UTF-8 native password, bounded to 4096 decoded bytes; discarded after this request.

string format: byte

>= 4 characters <= 5464 characters

Example ^generated

{
  "ceremony_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "password": "example"
}

Responses

200

OK

Media type application/json

object

account

required

string

digest

required

string

tenant

required

string format: uuid

uid

required

integer

>= 1 <= 4294967295

user_id

required

string format: uuid

Example ^generated

{
  "account": "example",
  "digest": "example",
  "tenant": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "uid": 1,
  "user_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

400

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

401

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

403

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

404

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

409

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

429

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

503

Request refused

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}