Scope a session
POST/v1/auth/session/scope
Exchanges the caller's token, scoped or not, for one scoped to project_id. With system, the new token is scoped to the whole cloud instead, which operator calls need. Attempts are rate limited.
Any valid token.
Request
Responses
- 201
- 400
- 401
- 403
- 413
- 415
- 422
- 429
- default
Created
Bad Request.
invalid_request: The body is not a single JSON object, names a field this operation does not take, or gives a value of the wrong type.
Unauthorized.
unauthenticated: The token is missing, expired or not valid.
Forbidden.
forbidden: The identity service would not scope the token. The user holds no role on that project, or on the cloud itself for system, or the token is no longer valid.
Request Entity Too Large.
body_too_large: The body is larger than the service accepts.
Unsupported Media Type.
unsupported_media_type: The body is not sent as application/json.
Unprocessable Entity.
validation_failed: Neither project_id nor system is given, or both are.
Too Many Requests.
rate_limited: More than 10 sign-in, scope or code attempts came from this address in the last minute.
An error, as an RFC 7807 problem document.