API概览
服务操作相关接口
| 接口 | 描述 | URI |
|---|---|---|
| List Services | 获取服务列表 | GET /auth/v1/services |
| Get Service | 获取指定服务信息 | GET /auth/v1/services/{serviceId} |
| List ResourceType Of Service | 获取指定服务的资源类型列表 | GET /auth/v1/services/{serviceId}/resource-types |
| Get ResourceType | 获取指定资源类型信息 | GET /auth/v1/services/{serviceId}/resource-types/{resourceTypeId} |
| List Action Of ResourceType | 获取指定资源类型的操作列表 | GET /auth/v1/services/{serviceId}/resource-types/{resourceTypeId}/actions |
| Get Action | 获取指定操作信息 | GET /auth/v1/services/{serviceId}/resource-types/{resourceTypeId}/actions/{actionId} |
策略授权相关接口
| 接口 | 描述 | URI |
|---|---|---|
| List Policies | 分页获取策略列表 | GET /auth/v1/policies/{pageIndex}/{pageSize} |
| Count Policies | 获取自定义策略数量 | GET /auth/v1/policies/count |
| Create Policy | 创建策略 | POST /auth/v1/policies |
| Get Policy | 获取策略信息 | GET /auth/v1/policies/{policyId} |
| Update Policy | 更新策略 | PATCH /auth/v1/policies/{policyId} |
| Delete Policy | 删除策略 | DELETE /auth/v1/policies/{policyId} |
| Policy Avaliable Users | 查询指定策略可关联的用户 | GET /auth/v1/policies/{policyId}/available-users |
| Policy Avaliable Groups | 查询指定策略可关联的用户组 | GET /auth/v1/policies/{policyId}/available-user-groups |
| Policy Users | 查询指定策略已关联的用户 | GET /auth/v1/policies/{policyId}/users |
| Policy Groups | 查询指定策略已关联的用户组 | GET /auth/v1/policies/{policyId}/user-groups |
| Policy Attach Objects | 为指定策略关联用户/组 | POST /auth/v1/policies/{policyId}/action/attach-objects |
| Authorizations | 统一授权 | POST /auth/v1/authorizations |
| Detach Policy | 权限回收 | DELETE /auth/v1/policies/action/detach/{attachId} |
用户相关接口
| 接口 | 描述 | URI |
|---|---|---|
| List Users | 获取用户列表 | GET /auth/v1/users |
| Count Users | 获取用户数量 | GET /auth/v1/users/count |
| Create User | 创建用户 | POST /auth/v1/users |
| Get User | 获取用户信息 | GET /auth/v1/users/{userId} |
| Update User | 更新用户 | PUT /auth/v1/users/{userId} |
| Change Password | 修改密码 | PUT /auth/v1/users/{userId}/action/changePwd |
| Delete User | 删除用户 | DELETE /auth/v1/users/{userId} |
| User Avaliable Policies | 查询指定用户可授权的策略 | GET /auth/v1/users/{userId}/available-policies |
| User Policies | 查询指定用户已授权的策略 | GET /auth/v1/users/{userId}/policies |
| User Avaliable Groups | 查询指定用户可加入的用户组 | GET /auth/v1/users/{userId}/available-user-groups |
| User Groups | 查询指定用户已加入的用户组 | GET /auth/v1/users/{userId}/user-groups |
| Get Totp Register Info | 获取MFA注册用信息 | GET /auth/v1/users/{userId}/action/get-totp-register-info |
| Bind Totp | 为用户绑定MFA | POST /auth/v1/users/{userId}/action/bind-totp |
| Remove Totp | 为用户解除MFA | PUT /auth/v1/users/{userId}/action/remove-totp?totp={totp} |
| Has Totp | 判断用户是否有绑定了MFA | GET /auth/v1/users/{userId}/action/has-totp |
用户组相关接口
| 接口 | 描述 | URI |
|---|---|---|
| List Groups | 获取用户组列表 | GET /auth/v1/user-groups |
| Count Groups | 获取用户组数量 | GET /auth/v1/user-groups/count |
| Create Group | 新建用户组 | POST /auth/v1/user-groups |
| Get Group | 用户组明细 | GET /auth/v1/user-groups/{groupId} |
| Update Group | 更新用户组 | PUT /auth/v1/user-groups/{groupId} |
| Delete Group | 删除用户组 | DELETE /auth/v1/user-groups/{groupId} |
| Group Users | 查询指定用户组已关联的用户 | GET /auth/v1/user-groups/{groupId}/users |
| Group Avaliable Users | 查询指定用户组可关联的用户 | GET /auth/v1/user-groups/{groupId}/available-users |
| Group Policies | 查询指定用户组已关联的策略 | GET /auth/v1/user-groups/{groupId}/policies |
| Group Avaliable Policies | 查询指定用户组可关联的策略 | GET /auth/v1/groups/{groupId}/available-policies |
| Add Users To Groups | 添加用户至用户组 | POST /auth/v1/user-group-relationships |
| Delete Users From Groups | 将用户移出用户组 | POST /auth/v1/delete-user-group-relationships |
密钥相关接口
| 接口 | 描述 | URI |
|---|---|---|
| List Secrets | 查询当前登录用户的密钥对列表 | GET /auth/v1/secrets |
| List Target Secrets | 查询指定用户的密钥对列表 | GET /auth/v1/users/{userId}/secrets |
| Secrets Count | 查询主账号密钥对数量 | GET /auth/v1/secrets/count |
| Create Secret | 新建密钥对 | POST /auth/v1/secrets |
| Update Secret | 修改密钥对描述 | PUT /auth/v1/secrets/{secretId} |
| Enable Secret | 启用密钥对 | PATCH /auth/v1/secrets/{secretId}/action/enable |
| Disable Secret | 禁用密钥对 | PATCH /auth/v1/secrets/{secretId}/action/disable |
| Delete Secret | 删除密钥对 | DELETE /auth/v1/secrets/{secretId} |