Pular para o conteúdo principal
POST
Allow actions in this session without asking

Autorizações

Authorization
string
header
obrigatório

Enforced on every transport, with no exempt operation. A person's request must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011 — except a request with no token on a laptop's socket from the OS user the kernel names as the host's own, which is that machine's user.

Parâmetros de caminho

sessionId
string<uuid>
obrigatório

The session's id.

Corpo

application/json

The allow rules to hold for one session, in the order they apply.

rules
object[]
obrigatório

Resposta

Held. The next permission check in this session reads them.