{"items":[{"type":"link","label":"Passwords","link":"/openapi/user/backend-passwords.openapi","routeSlug":"/openapi/user/backend-passwords.openapi","content":{"contentType":"overview","meta":{"name":"Passwords"},"children":[{"nodeType":"container","panels":[{"title":"Download OpenAPI description","titleTranslationKey":"download.description.title","children":[{"kind":"download","label":"backend-passwords.openapi.json","url":"/_bundle/openapi/user/backend-passwords.openapi.json?download"},{"kind":"download","label":"backend-passwords.openapi.yaml","url":"/_bundle/openapi/user/backend-passwords.openapi.yaml?download"}]},{"title":"Overview","titleTranslationKey":"info.title","children":[]},{"title":"Languages","titleTranslationKey":"languages.title","children":[{"kind":"languages","options":[{"key":"curl","title":"cURL","lang":"curl"},{"key":"node","title":"Node.js","lang":"Node.js"},{"key":"go","title":"Go","lang":"Go"},{"key":"javascript","title":"JavaScript","lang":"JavaScript"},{"key":"java","title":"Java","lang":"Java"},{"key":"python","title":"Python","lang":"Python"}]}]},{"title":"Servers","titleTranslationKey":"servers.title","children":[{"kind":"servers","servers":[{"url":"https://api.sbx.transmitsecurity.io/cis","description":"Sandbox environment"},{"url":"https://api.transmitsecurity.io/cis","description":"US production environment"},{"url":"https://api.eu.transmitsecurity.io/cis","description":"EU production environment"},{"url":"https://api.ca.transmitsecurity.io/cis","description":"CA production environment"},{"url":"https://api.au.transmitsecurity.io/cis","description":"AU production environment"},{"url":"https://api.gasne1-ts01.transmitsecurity.io/cis","description":"JP production environment"}],"mode":"default"}]}],"children":[{"nodeType":"overview-section-wrapper","children":[{"nodeType":"header","level":1,"label":"Passwords","showPageActions":true},{"nodeType":"overview-section-wrapper","children":[{"nodeType":"markdoc","content":"Login users using passwords. This implements a backend-to-backend integration for password authentication."}],"sectionId":"/openapi/user/backend-passwords.openapi"}],"sectionId":"/openapi/user/backend-passwords.openapi"}]}]}},{"label":"Authenticate password","deprecated":false,"httpVerb":"post","isAdditionalOperation":false,"isWebhook":false,"type":"link","link":"/openapi/user/backend-passwords.openapi/other/authenticatepassword","routeSlug":"/openapi/user/backend-passwords.openapi/other/authenticatepassword","metadata":{"seo":{"title":"Authenticate password","description":"Authenticates a user using their username and password. The value of this username may correspond to the user's username, phone number, or email (based on what was used to register their password credentials, see Register password)."}},"content":{"contentType":"item","itemVariant":"httpItem","meta":{"sourceId":"authenticatePassword","name":"Authenticate password","isWebhook":false,"pointer":"/paths/~1v1~1auth~1password~1authenticate/post","hasSamples":true},"children":[{"nodeType":"container","children":[{"nodeType":"header","level":2,"label":"Authenticate password","isWebhook":false,"showPageActions":true}],"panels":[]},{"nodeType":"container","children":[{"nodeType":"header","level":4,"label":"Request","labelTranslationKey":"request","deepLinkSuffix":"request"},{"nodeType":"markdoc","content":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Authenticates a user using their username and password. The value of this username may correspond to the user's username, phone number, or email (based on what was used to register their password credentials, see "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"/openapi/user/user.openapi/other/addpasswordcredentialstocurrentuser"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Register password"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":")."},"children":[]}]}]}]},{"nodeType":"security","requirements":[{"schemes":[{"name":"ClientAccessToken","scopes":[],"type":"oauth2","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"A token generated by an end-user application using the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"/openapi/token.openapi/other/getaccesstoken"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"token endpoint"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":". It provides access to resources and data on the tenant level or associated with the specific application (but not other apps in the tenant)"},"children":[]}]}]}],"flows":{"clientCredentials":{"tokenUrl":"/oidc/token","scopes":{}}}}]}]},{"nodeType":"item-content","variant":"body","label":"Request Body","labelTranslationKey":"body","required":true,"mediaTypes":["application/json"],"mediaTypeSchemas":{"application/json":{"schemaId":"schema_337"}},"schemaId":"schema_337","pointer":"/paths/~1v1~1auth~1password~1authenticate/post/requestBody"}],"panels":[{"children":[{"kind":"code-sample","source":{"kind":"code-sample","operationType":"http","method":"POST","path":"/v1/auth/password/authenticate","servers":[{"url":"https://api.sbx.transmitsecurity.io/cis","description":"Sandbox environment"},{"url":"https://api.transmitsecurity.io/cis","description":"US production environment"},{"url":"https://api.eu.transmitsecurity.io/cis","description":"EU production environment"},{"url":"https://api.ca.transmitsecurity.io/cis","description":"CA production environment"},{"url":"https://api.au.transmitsecurity.io/cis","description":"AU production environment"},{"url":"https://api.gasne1-ts01.transmitsecurity.io/cis","description":"JP production environment"}],"parameters":{"path":[],"query":[],"querystring":[],"header":[],"cookie":[]},"security":[{"schemes":[{"id":"ClientAccessToken","type":"oauth2","flows":{"clientCredentials":{"tokenUrl":"/oidc/token","scopes":{}}}}],"scopes":[]}],"requestBody":{"application/json":{"schemaId":"schema_337"}},"responseCodes":["200","400","401","403","500"],"pointer":"/v1/auth/password/authenticate","href":"other/authenticatepassword","openApiOperationId":"authenticatePassword","summary":"Authenticate password"},"isWebhook":false,"hideReplay":false,"servers":[{"url":"https://api.sbx.transmitsecurity.io/cis","description":"Sandbox environment"},{"url":"https://api.transmitsecurity.io/cis","description":"US production environment"},{"url":"https://api.eu.transmitsecurity.io/cis","description":"EU production environment"},{"url":"https://api.ca.transmitsecurity.io/cis","description":"CA production environment"},{"url":"https://api.au.transmitsecurity.io/cis","description":"AU production environment"},{"url":"https://api.gasne1-ts01.transmitsecurity.io/cis","description":"JP production environment"}],"schemaId":"schema_337","mediaTypes":["application/json"],"mediaTypeSchemas":{"application/json":{"schemaId":"schema_337"}},"examples":[]}]}]},{"nodeType":"container","children":[{"nodeType":"header","level":4,"label":"Responses","labelTranslationKey":"responses","deepLinkSuffix":"responses"},{"nodeType":"item-content","variant":"responses","responses":[{"code":"200","description":"Returns user tokens","mediaType":"application/json","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"components/schemas/ApiTokenResponse"}},"schemaId":"components/schemas/ApiTokenResponse"},{"code":"400","mediaType":"application/json","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_338"}},"schemaId":"schema_338"},{"code":"401","mediaType":"application/json","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_339"}},"schemaId":"schema_339"},{"code":"403","mediaType":"application/json","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_340"}},"schemaId":"schema_340"},{"code":"500","mediaType":"application/json","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_341"}},"schemaId":"schema_341"}],"pointer":"/paths/~1v1~1auth~1password~1authenticate/post/responses"}],"panels":[{"children":[{"kind":"response","headerTitle":"Response","responseCodes":[{"code":"200","schemaId":"components/schemas/ApiTokenResponse","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"components/schemas/ApiTokenResponse"}}},{"code":"400","schemaId":"schema_338","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_338"}}},{"code":"401","schemaId":"schema_339","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_339"}}},{"code":"403","schemaId":"schema_340","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_340"}}},{"code":"500","schemaId":"schema_341","mediaTypes":["application/json"],"mediaTypeContent":{"application/json":{"schemaId":"schema_341"}}}],"examples":[]}]}]}]},"httpPath":"/v1/auth/password/authenticate"}],"store":{"schemaStore":{"components/schemas/ApiPasswordTokenWithIdentifierRequestDto":{"id":"components/schemas/ApiPasswordTokenWithIdentifierRequestDto","kind":"json-schema","title":"ApiPasswordTokenWithIdentifierRequestDto","data":{"type":"object","properties":{"resource":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Resource URI the authentication request is attempting to access, which is reflected in the audience ("},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"aud"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":" claim) of the access token. This must be configured as resource for the application."},"children":[]}]}]}]},"claims":{"example":{"id_token":{"roles":null}},"description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Used to request additional claims in the ID token, such as roles, permissions, and other user profile data. The structure is per the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"https://openid.net/specs/openid-connect-core-1_0-final.html#ClaimsParameter"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"OIDC Standard"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":". For supported claims and how to request custom claims, see the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"https://developer.transmitsecurity.com/openapi/id_token_reference/"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"ID Token Reference"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}],"allOf":[{"$ref":"#/components/schemas/ApiTokenRequestClaims"}]},"org_id":{"type":"string","description":"Organization ID, used for member login in B2B scenarios"},"client_attributes":{"description":"Client attributes","allOf":[{"$ref":"#/components/schemas/ClientAttributes"}]},"device_id":{"type":"string","description":"Identifier of the device from which the authentication request originates","maxLength":80},"session_id":{"type":"string","description":"Used to associate the authentication with an existing session (such as for MFA). If unspecified, a new session is created and the session ID is returned."},"username_type":{"type":"string","enum":["username","email","phone_number"],"description":"Type of user identifier used to register the password","default":"username"},"password":{"type":"string","description":"Password"},"identifier":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"User identifier, which may correspond to the user's email, phone number, username, or user ID. The type of identifier should be specified as the "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"identifier_type"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}]},"identifier_type":{"type":"string","description":"Type of user identifier used for login"}},"required":["password","identifier","identifier_type"]}},"components/schemas/ApiPasswordTokenWithUsernameRequestDto":{"id":"components/schemas/ApiPasswordTokenWithUsernameRequestDto","kind":"json-schema","title":"ApiPasswordTokenWithUsernameRequestDto","data":{"type":"object","properties":{"resource":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Resource URI the authentication request is attempting to access, which is reflected in the audience ("},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"aud"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":" claim) of the access token. This must be configured as resource for the application."},"children":[]}]}]}]},"claims":{"example":{"id_token":{"roles":null}},"description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Used to request additional claims in the ID token, such as roles, permissions, and other user profile data. The structure is per the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"https://openid.net/specs/openid-connect-core-1_0-final.html#ClaimsParameter"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"OIDC Standard"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":". For supported claims and how to request custom claims, see the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"https://developer.transmitsecurity.com/openapi/id_token_reference/"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"ID Token Reference"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}],"allOf":[{"$ref":"#/components/schemas/ApiTokenRequestClaims"}]},"org_id":{"type":"string","description":"Organization ID, used for member login in B2B scenarios"},"client_attributes":{"description":"Client attributes","allOf":[{"$ref":"#/components/schemas/ClientAttributes"}]},"device_id":{"type":"string","description":"Identifier of the device from which the authentication request originates","maxLength":80},"session_id":{"type":"string","description":"Used to associate the authentication with an existing session (such as for MFA). If unspecified, a new session is created and the session ID is returned."},"username_type":{"type":"string","enum":["username","email","phone_number"],"description":"Type of user identifier used to register the password","default":"username"},"password":{"type":"string","description":"Password"},"username":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Identifier of the user, which may contain the user's username, email or phone number (depending on what was used to register password credentials). The "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"username_type"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":" must match the type of identifier used."},"children":[]}]}]}],"deprecated":true}},"required":["password","username"]}},"components/schemas/ApiTokenResponse":{"id":"components/schemas/ApiTokenResponse","kind":"json-schema","title":"ApiTokenResponse","data":{"type":"object","properties":{"access_token":{"type":"string","description":"User access token for accessing endpoints on behalf of the authenticated user."},"id_token":{"type":"string","description":"ID token that identifies the user."},"refresh_token":{"type":"string","description":"Refresh token used to refresh an expired access token."},"token_type":{"type":"string","description":"Bearer."},"expires_in":{"type":"number","description":"Expiration time of the access token in seconds.","default":3600},"session_id":{"type":"string","description":"ID of the session in which the authentication occurs."},"signing_artifacts":{"description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Cryptographic data required to independently verify a transaction approval outside Mosaic. Returned when "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"approval_data"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":" is provided for a supported transaction-signing flow; fields vary by authenticator."},"children":[]}]}]}],"oneOf":[{"$ref":"#/components/schemas/ApiPasskeySigningArtifactsDto"},{"$ref":"#/components/schemas/ApiCryptoKeySigningArtifactsDto"}]}},"required":["access_token","token_type","expires_in","session_id"]}},"components/schemas/ApiPasskeySigningArtifactsDto":{"id":"components/schemas/ApiPasskeySigningArtifactsDto","kind":"json-schema","title":"ApiPasskeySigningArtifactsDto","data":{"type":"object","properties":{"approval_data":{"type":"object","additionalProperties":{"type":"string"},"description":"Transaction data provided when the transaction-signing flow was started. Returned after a successful approval.","example":{"transaction_id":"eFII2y40uB9hQ98nXt3tc1IHkRt8GrRZiqZuRn_59wT","sum":"200"}},"public_key":{"type":"string","description":"Public key used to verify the signature."},"signature":{"type":"string","description":"Signature generated by the passkey authenticator."},"credential_id":{"type":"string","description":"Identifier of the passkey credential used for the approval."},"webauthn_session_id":{"type":"string","description":"Identifier of the WebAuthn authentication session."},"authenticator_data":{"type":"string","description":"Base64url-encoded data returned by the passkey authenticator as part of the WebAuthn assertion."},"client_data_json":{"type":"string","description":"Base64url-encoded client data from the WebAuthn authentication response."},"raw_challenge":{"type":"string","description":"Raw pre-hash challenge used to bind the signature to the approval data."}},"required":["approval_data","public_key","signature","credential_id","webauthn_session_id","authenticator_data","client_data_json","raw_challenge"]}},"components/schemas/ApiSigningArtifactAlgorithmDto":{"id":"components/schemas/ApiSigningArtifactAlgorithmDto","kind":"json-schema","title":"ApiSigningArtifactAlgorithmDto","data":{"type":"object","properties":{"name":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Signature algorithm used to verify the signature, for example "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"ecdsa"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":" or "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"rsa-pss"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}]},"hash":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Hash algorithm used to verify the signature, for example "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"sha-256"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}]},"saltLength":{"type":"number","description":"Length, in bytes, of the salt used by RSA-PSS."},"namedCurve":{"type":"string","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"Elliptic curve used by ECDSA, for example "},"children":[]},{"$$mdtype":"Node","type":"code","inline":true,"attributes":{"content":"P-256"},"children":[]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"."},"children":[]}]}]}]}},"required":["name"]}},"components/schemas/ApiCryptoKeySigningArtifactsDto":{"id":"components/schemas/ApiCryptoKeySigningArtifactsDto","kind":"json-schema","title":"ApiCryptoKeySigningArtifactsDto","data":{"type":"object","properties":{"approval_data":{"type":"object","additionalProperties":{"type":"string"},"description":"Transaction data provided when the transaction-signing flow was started. Returned after a successful approval.","example":{"transaction_id":"eFII2y40uB9hQ98nXt3tc1IHkRt8GrRZiqZuRn_59wT","sum":"200"}},"public_key":{"type":"string","description":"Public key used to verify the signature."},"signature":{"type":"string","description":"Signature generated for the transaction-signing challenge."},"challenge":{"type":"string","description":"Challenge used to generate the signature and bind it to the approval data."},"algorithm":{"description":"Parameters required to verify the signature.","allOf":[{"$ref":"#/components/schemas/ApiSigningArtifactAlgorithmDto"}]}},"required":["approval_data","public_key","signature","challenge","algorithm"]}},"components/schemas/ApiTokenRequestClaims":{"id":"components/schemas/ApiTokenRequestClaims","kind":"json-schema","title":"ApiTokenRequestClaims","data":{"type":"object","properties":{"id_token":{"type":"object"},"access_token":{"type":"object"}}}},"components/schemas/ClientAttributes":{"id":"components/schemas/ClientAttributes","kind":"json-schema","title":"ClientAttributes","data":{"type":"object","properties":{"user_agent":{"type":"string"},"ip_address":{"type":"string"}}}},"schema_337":{"kind":"json-schema","data":{"oneOf":[{"$ref":"#/components/schemas/ApiPasswordTokenWithIdentifierRequestDto"},{"$ref":"#/components/schemas/ApiPasswordTokenWithUsernameRequestDto"}]},"id":"schema_337"},"schema_338":{"kind":"json-schema","data":{"type":"object","properties":{"error_code":{"type":"string","enum":["system_invalid_input"]},"message":{"type":"string"}}},"id":"schema_338"},"schema_339":{"kind":"json-schema","data":{"type":"object","properties":{"error_code":{"type":"string","enum":["auth_invalid_credentials"]},"message":{"type":"string"}}},"id":"schema_339"},"schema_340":{"kind":"json-schema","data":{"type":"object","properties":{"error_code":{"type":"string","enum":["auth_locked","user_not_found","user_not_active","auth_invalid_credentials","auth_password_expired","auth_password_temporary","auth_not_active"]},"message":{"type":"string"}}},"id":"schema_340"},"schema_341":{"kind":"json-schema","data":{"type":"object","properties":{"error_code":{"type":"string","enum":["system_unexpected_error"]},"message":{"type":"string"}}},"id":"schema_341"}},"exampleStore":{},"securitySchemeStore":{"bearer":{"id":"bearer","type":"http","scheme":"bearer","bearerFormat":"JWT"},"UserAccessToken":{"id":"UserAccessToken","type":"http","scheme":"bearer","bearerFormat":"JWT","description":"A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated"},"AdminAccessToken":{"id":"AdminAccessToken","type":"oauth2","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"A token generated by a management application using the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"/openapi/token.openapi/other/getaccesstoken"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"token endpoint"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":". It provides access to all resources for the tenant and its apps"},"children":[]}]}]}],"flows":{"clientCredentials":{"tokenUrl":"/oidc/token","scopes":{}}}},"ClientAccessToken":{"id":"ClientAccessToken","type":"oauth2","description":[{"$$mdtype":"Node","type":"paragraph","attributes":{},"children":[{"$$mdtype":"Node","type":"inline","attributes":{},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"A token generated by an end-user application using the "},"children":[]},{"$$mdtype":"Node","type":"link","inline":true,"attributes":{"href":"/openapi/token.openapi/other/getaccesstoken"},"children":[{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":"token endpoint"},"children":[]}]},{"$$mdtype":"Node","type":"text","inline":true,"attributes":{"content":". It provides access to resources and data on the tenant level or associated with the specific application (but not other apps in the tenant)"},"children":[]}]}]}],"flows":{"clientCredentials":{"tokenUrl":"/oidc/token","scopes":{}}}},"OrgAdminAccessToken":{"id":"OrgAdminAccessToken","type":"oauth2","description":"A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.","flows":{"clientCredentials":{"tokenUrl":"/oidc/token","scopes":{}}}}},"servers":[{"url":"https://api.sbx.transmitsecurity.io/cis","description":"Sandbox environment"},{"url":"https://api.transmitsecurity.io/cis","description":"US production environment"},{"url":"https://api.eu.transmitsecurity.io/cis","description":"EU production environment"},{"url":"https://api.ca.transmitsecurity.io/cis","description":"CA production environment"},{"url":"https://api.au.transmitsecurity.io/cis","description":"AU production environment"},{"url":"https://api.gasne1-ts01.transmitsecurity.io/cis","description":"JP production environment"}]},"options":{"corsProxyUrl":"https://cors.redoc.ly","hideSchemaTitles":true,"onlyRequiredInSamples":false,"hideDownloadButtons":false,"codeSamples":{"skipOptionalParameters":false,"languages":[{"lang":"curl","label":"cURL"},{"lang":"Node.js"},{"lang":"Go"},{"lang":"JavaScript"},{"lang":"Java"},{"lang":"Python"}]},"feedback":{"hide":true,"settings":{"label":""}},"hideSidebar":true,"mockServer":{"off":true},"disableRouter":true,"downloadUrls":[{"url":"/_bundle/openapi/user/backend-passwords.openapi.json?download"},{"url":"/_bundle/openapi/user/backend-passwords.openapi.yaml?download"}],"excludeFromSearch":false,"specType":"openapi","markdocOptions":{"tags":{},"nodes":{},"components":{}},"metadata":{"title":"Passwords","description":"Login users using passwords. This implements a backend-to-backend integration for password authentication."}},"baseSlug":"/openapi/user/backend-passwords.openapi","routesMapping":{}}