Skip to content

Home

Jump to bottom
Github Action edited this page Mar 19, 2021 · 14 revisions

Documentation for Conjur

Documentation for API Endpoints

All URIs are relative to http://localhost

Class Method HTTP request Description
AuthenticationApi changePassword PUT /authn/{account}/password Changes a user’s password.
AuthenticationApi enableAuthenticatorInstance PATCH /{authenticator}/{service_id}/{account} Enables or disables authenticator service instances.
AuthenticationApi getAPIKey GET /authn/{account}/login Gets the API key of a user given the username and password via HTTP Basic Authentication.
AuthenticationApi getAPIKeyViaLDAP GET /authn-ldap/{service_id}/{account}/login Gets the Conjur API key of a user given the LDAP username and password via HTTP Basic Authentication.
AuthenticationApi getAccessToken POST /authn/{account}/{login}/authenticate Gets a short-lived access token, which is required in the header of most subsequent API requests.
AuthenticationApi getAccessTokenViaAWS POST /authn-iam/{service_id}/{account}/{login}/authenticate Get a short-lived access token for applications running in AWS.
AuthenticationApi getAccessTokenViaAzure POST /authn-azure/{service_id}/{account}/{login}/authenticate Gets a short-lived access token for applications running in Azure.
AuthenticationApi getAccessTokenViaGCP POST /authn-gcp/{account}/authenticate Gets a short-lived access token for applications running in Google Cloud Platform.
AuthenticationApi getAccessTokenViaKubernetes POST /authn-k8s/{service_id}/{account}/{login}/authenticate Gets a short-lived access token for applications running in Kubernetes.
AuthenticationApi getAccessTokenViaLDAP POST /authn-ldap/{service_id}/{account}/{login}/authenticate Gets a short-lived access token for users and hosts using their LDAP identity to access the Conjur API.
AuthenticationApi getAccessTokenViaOIDC POST /authn-oidc/{service_id}/{account}/authenticate Gets a short-lived access token for applications using OpenID Connect (OIDC) to access the Conjur API.
AuthenticationApi k8sInjectClientCert POST /authn-k8s/{service_id}/inject_client_cert For applications running in Kubernetes; sends Conjur a certificate signing request (CSR) and requests a client certificate injected into the application's Kubernetes pod.
AuthenticationApi rotateApiKey PUT /authn/{account}/api_key Rotates a role's API key.
CertificateAuthorityApi sign POST /ca/{account}/{service_id}/sign Gets a signed certificate from the configured Certificate Authority service.
HostFactoryApi createHost POST /host_factories/hosts Creates a Host using the Host Factory.
HostFactoryApi createHostToken POST /host_factory_tokens Creates one or more host identity tokens.
HostFactoryApi revokeHostToken DELETE /host_factory_tokens/{token} Revokes a token, immediately disabling it.
PoliciesApi loadPolicy PUT /policies/{account}/policy/{identifier} Loads or replaces a Conjur policy document.
PoliciesApi modifyPolicy PATCH /policies/{account}/policy/{identifier} Modifies an existing Conjur policy.
PoliciesApi updatePolicy POST /policies/{account}/policy/{identifier} Adds data to the existing Conjur policy.
PublicKeysApi showPublicKeys GET /public_keys/{account}/{kind}/{identifier} Shows all public keys for a resource.
ResourcesApi getResource GET /resources/{account}/{kind}/{identifier} Shows a description of a single resource.
ResourcesApi getResources GET /resources Lists resources within an organization account.
ResourcesApi getResourcesOnAccount GET /resources/{account} Lists resources within an organization account.
ResourcesApi getSimilarResourcesOnAccount GET /resources/{account}/{kind} Lists resources of the same kind within an organization account.
RolesApi addMember POST /roles/{account}/{kind}/{identifier} Update or modify an existing role membership
RolesApi deleteMember DELETE /roles/{account}/{kind}/{identifier} Deletes an existing role membership
RolesApi getRole GET /roles/{account}/{kind}/{identifier} Get role information
SecretsApi createVariable POST /secrets/{account}/{kind}/{identifier} Creates a secret value within the specified variable.
SecretsApi getVariable GET /secrets/{account}/{kind}/{identifier} Fetches the value of a secret from the specified Variable.
SecretsApi getVariables GET /secrets Fetch multiple secrets
StatusApi authenticatorServiceStatus GET /authn-{authenticator}/{service_id}/{account}/status Details whether an authentication service has been configured properly
StatusApi authenticatorStatus GET /authn-{authenticator}/{account}/status Details whether an authentication service has been configured properly
StatusApi authenticatorsIndex GET /authenticators Details about which authenticators are on the Conjur Server
StatusApi whoAmI GET /whoami Provides information about the client making an API request.

Documentation for Models

Documentation for Authorization

basicAuth

  • Type: HTTP basic authentication

conjurAuth

  • Type: API key
  • API key parameter name: Authorization
  • Location: HTTP header

conjurKubernetesMutualTls

  • Type: HTTP basic authentication
Clone this wiki locally