验证身份并申请操作证明

按 scope 采用严格的操作上下文。access_token.generate 必须恰好包含 scopes 与 expires_at，缺失、空对象或额外字段返回 SECURITY_CONTEXT_INVALID。

业务失败时 success=false。错误码可能位于顶层 code 或 data.code；HTTP 200 也可能表示验证未通过。

身份验证

AuthorizationBearer <token>

必须使用密码或 OAuth 登录后返回的会话 access_token；PAT 不能管理或创建 PAT。

位置：header

请求体

methodstring

允许值"password" | "2fa"

scopestring

context

password?string

password_encrypted?string

encryption_key_id?string

code?string

响应体

application/json

curl -X POST "https://api.beeaicloud.com/api/verify" \
  -H "Content-Type: application/json" \
  -d '{
    "method": "password",
    "scope": "access_token.generate",
    "context": {
      "scopes": [
        "string"
      ],
      "expires_at": 0
    }
  }'

curl -X POST "https://api.beeaicloud.com/api/verify" \  -H "Content-Type: application/json" \  -d '{    "method": "password",    "scope": "access_token.generate",    "context": {      "scopes": [        "string"      ],      "expires_at": 0    }  }'

{
  "success": true,
  "message": "string",
  "data": {
    "proof_token": "string",
    "expires_at": 0,
    "method": "string",
    "scope": "string"
  }
}

{
  "success": false,
  "message": "string",
  "code": "string",
  "data": {
    "code": "string"
  }
}

{
  "success": false,
  "message": "string",
  "code": "string",
  "data": {
    "code": "string"
  }
}

{
  "success": false,
  "message": "string",
  "code": "string",
  "data": {
    "code": "string"
  }
}

{
  "success": false,
  "message": "string",
  "code": "string",
  "data": {
    "code": "string"
  }
}

验证身份并申请操作证明

身份验证

请求体

响应体

200application/json

400application/json

401application/json

403application/json

429application/json

application/json

application/json

application/json

application/json

application/json