Management APISecurity verification
⚠️Compliance notice: Use this project only for lawfully authorized API gateway, internal management, and private deployment scenarios. Follow upstream terms of service, platform rules, regulatory requirements, and content safety requirements.
Verify identity and request an operation proof
Use the strict operation context for the scope. access_token.generate requires exactly scopes and expires_at. Missing context, an empty object or extra fields return SECURITY_CONTEXT_INVALID.
Business failures use success=false. Error codes may be in code or data.code; HTTP 200 can still mean verification failed.
AuthorizationBearer <token>
Use the session access_token returned by password or OAuth sign-in. A PAT cannot manage or create PATs.
In: header
methodstring
Value in
"password" | "2fa"scopestring
context
password?string
password_encrypted?string
encryption_key_id?string
code?string
Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://api.beeaicloud.com/api/verify" \ -H "Content-Type: application/json" \ -d '{ "method": "password", "scope": "access_token.generate", "context": { "scopes": [ "string" ], "expires_at": 0 } }'{
"success": true,
"message": "string",
"data": {
"proof_token": "string",
"expires_at": 0,
"method": "string",
"scope": "string"
}
}{
"success": false,
"message": "string",
"code": "string",
"data": {
"code": "string"
}
}{
"success": false,
"message": "string",
"code": "string",
"data": {
"code": "string"
}
}{
"success": false,
"message": "string",
"code": "string",
"data": {
"code": "string"
}
}{
"success": false,
"message": "string",
"code": "string",
"data": {
"code": "string"
}
}How is this guide?