Validate User Permission

Use this endpoint to check if a user is allowed to perform a specific action on a resource. Typically used in M2M authentication with Midaz.

POST /v1/authorize

Validate User Permission

cURL

curl --request POST \
  --url https://auth.sandbox.lerian.net/v1/authorize \
  --header 'Authorization: <authorization>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "action": "post",
  "resource": "ledger",
  "sub": "admin"
}
'

200

1

{
  "authorized": true,
  "timestamp": "1744052319"
}

Headers

Authorization · string · required

The authorization token in the 'Bearer ' format.

Body

application/json

Information used to validate whether a user has permission to perform a specific action on a given resource.

action · string · required

The operation being performed on the resource.

resource · string · required

The resource the action applies to, typically a service or domain within the system.

sub · string

Subject requesting access. Usually a midaz_role or a user_id. If not provided, it's extracted from the token.

Response

200

application/json

Indicates that the resource was successfully created and the operation was completed as expected.

Information given as the successful response for the Enfore User Permission endpoint.

authorized · boolean

If true, it indicates that the user is authorized to perform the action.

timestamp · string<date-time>

The time when the permission was verified.