Skip to main content

Verify user access using verification request ID

GET 
/groups-srv/verifications/:verificationId

This API call verifies if a user (sub) meets the access requirements defined in a stored verification request. The verification request must exist and the sub query parameter is required.

Purpose:

  • Verify user access using a pre-configured verification request
  • Reuse access control rules defined in verification requests
  • Centralized access verification using stored rules

Parameters:

  • verificationId (path, required): The unique ID (UUID) of the stored verification request
  • sub (query, required): The user ID to verify access for

Validation Rules:

  • verificationId: Required, must be a valid UUID format, verification request must exist
  • sub: Required (query parameter), must be a valid user ID (UUID format), user must exist

Authentication Requirements:

  • This endpoint requires authentication
  • For anonymous tokens, the cidaas:users_read scope is required
  • For authenticated users: non-admin users can only verify their own access (sub must match token's sub) unless they have admin roles
  • Admin users can verify access for any user

Business Rules:

  • The verification request's filters and matchCondition are applied to check user access
  • Same verification logic as POST /groups-srv/verifications but uses stored configuration
  • Useful for reusing access control rules across multiple verification calls

Request​

Responses​

OK