Harthelm Docs
REST APIAuth

Break-glass sign-in

Signs in the break-glass administrator with the username and password from the configured Secret, independent of the OIDC issuer. Rate-limited and audit-logged; the resulting session carries `break_glass: true`, which the UI shows as a red banner. Answers 404 when break-glass is disabled.

Generated from openapi/harthelm.yaml at v1.5.0
POST
/auth/local

Request Body

application/json
  1. body
username*string
Length1 <= length <= 128
password*string
Length1 <= length <= 1024

Response Body

Signed in; the response sets the session cookie.

curl -X POST 'https://console.example.com/api/v1/auth/local' \  -H 'Content-Type: application/json' \  -d '{  "username": "string",  "password": "string"}'
Empty

The current browser session

Answers 401 when there is no valid session cookie; the UI then shows the login page.

End the current session

Revokes the session in the database and clears the session cookie.