Auth Connections
Generate a new key pair
Replaces the key pair and invalidates the access token bound to the old one. Not reversible, and calls through this connection fail until the new public key is registered with the gateway, so the UI confirms first. No workflow needs editing.
Authorization
bearerAuth In: header
Path Parameters
The connection id. Must be an ObjectId.
^[a-f\d]{24}$Query Parameters
Organization to act on. Defaults to the caller's own when omitted or empty. Only a SUPERADMIN may name a different one; an ADMIN doing so is refused with 403, and a value that is not an ObjectId is refused with 400 rather than falling back to the caller's own organization.
^[a-f\d]{24}$Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
No fields. The connection is named in the path.
Response Body
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/auth-connections/string/regenerate-key" \ -H "Content-Type: application/json" \ -d '{}'{ "success": true, "data": { "_id": "6ab3d1f2c4e5a60123456789", "name": "Spring Underwriting", "type": "oauth2_client_credentials_dpop", "tokenUrl": "https://auth.example.com/oauth2/token", "clientId": "client-abc", "scopes": [ "underwriting.read" ], "allowedHosts": [ "gateway.example.com" ], "authorizationScheme": "DPoP", "jwkThumbprint": "5MBNqyGaaNaWVo3c-W7Q5HorbYFA6tHxRlglvb7JDBI", "isActive": true }}