⌘ K
OpenAPI

API REFERENCE

Authentication endpoints

Enrollment, password, passkey, session, step-up, and recovery routes.

GET/api/auth/enrollment/capabilities

Read enrollment readiness

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/auth/enrollment/capabilities'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/api/auth/session/capabilities

Read session security status

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/auth/session/capabilities'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/api/auth/recovery/capabilities

Read recovery capabilities

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/auth/recovery/capabilities'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/start

Start verified-email enrollment

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/start'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

browser session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/verify-email

Verify the six-digit email code

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/verify-email'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

enrollment token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/resend-email

Request a replacement verification email

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/resend-email'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

enrollment token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/password/complete

Create an account with verified email and password

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/password/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

enrollment token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/passkey/options

Issue registration options

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/passkey/options'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

enrollment token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/enrollment/passkey/complete

Verify and persist a passkey

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/enrollment/passkey/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

enrollment token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/signin/passkey/options

Issue a passkey sign-in challenge

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/signin/passkey/options'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/signin/passkey/complete

Verify an assertion and issue a session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/signin/passkey/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

public

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/signin/password

Verify a password and issue a session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/signin/password'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

browser origin + password credential

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/signin/email-otp/start

Request a short-lived email sign-in code

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/signin/email-otp/start'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

exact origin + rate limit

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/signin/email-otp/complete

Verify a single-use email code and issue a session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/signin/email-otp/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

exact origin + rate limit

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/api/auth/session

Resolve the current session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/auth/session'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

browser session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
GET/api/auth/sessions

List active sessions

This operation is part of the public Lucion Identity contract.

Safe request
curl -X GET 'https://identity.lucionglobal.com/api/auth/sessions'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Authentication

browser session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/sessions/revoke

Revoke one owned session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/sessions/revoke'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + CSRF

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/step-up/passkey/options

Issue a step-up challenge

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/step-up/passkey/options'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + CSRF

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/step-up/passkey/complete

Complete passkey step-up

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/step-up/passkey/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + CSRF

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/step-up/password

Complete password re-authentication step-up

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/step-up/password'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

session + CSRF + password credential

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/recovery/start

Start recovery proof

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/recovery/start'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

browser session

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/recovery/resend

Resend a recovery code

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/recovery/resend'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

recovery token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/recovery/verify

Verify recovery proof without a session

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/recovery/verify'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

recovery token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/recovery/passkey/options

Issue replacement-passkey options

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/recovery/passkey/options'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

recovery token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation
POST/api/auth/recovery/passkey/complete

Complete replacement-passkey recovery

This operation is part of the public Lucion Identity contract.

Safe request
curl -X POST 'https://identity.lucionglobal.com/api/auth/recovery/passkey/complete'
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'
  -H 'Content-Type: application/json'
  -H 'Idempotency-Key: YOUR_IDEMPOTENCY_KEY'
  --data '{}'

Authentication

recovery token

Request

No request body documented.

Responses and errors

Request IDs: X-Request-IDFull OpenAPI operation