Harthelm Docs
REST APIIdentity

The calling user

Who the credentials belong to, with the cluster-admin flag; the UI and `hart whoami` read it. Answers 401 without a valid session or API key.

Generated from openapi/harthelm.yaml at v1.5.0
GET
/me

Authorization

cookie__Host-harthelm_session<token>

Browser session of the UI (12 h idle, 7 days absolute). State-changing requests also need the header Harthelm-CSRF: 1 and a matching Origin.

Response Body

The authenticated user.

application/json
  1. response
id*ID

Numeric resource id.

Formatint64
Range1 <= value
email*string

The address the identity provider asserted; empty when it sent none, and for the break-glass administrator.

name*string
is_cluster_admin*boolean
email_verified?boolean

The identity provider verified the email and its email_verified is trusted (HART_OIDC_TRUST_EMAIL_VERIFIED); only then do invitations attach. Absent for an older core.

picture_url?string

The picture claim; absent when the identity provider sends none. Show initials instead.

issuer?string

The identity provider's issuer URL (Account shows it read-only); absent for the break-glass admin.

curl -X GET 'https://console.example.com/api/v1/me'
{  "id": 1,  "email": "string",  "name": "string",  "is_cluster_admin": true,  "email_verified": true,  "picture_url": "string",  "issuer": "string"}

Revoke a repository

Removes the repository from the workspace's list of repositories the git proxy lets it reach; the next git request for it gets 403. Audited as `git_access.remove`. Needs `workspace.git_access`.

The caller's Git provider connections

The providers the caller connected (*Git connections*), with the number of live workspaces the caller owns whose origin is at that provider: disconnecting stops the git proxy for them until the caller connects again or an admin transfers their ownership. Connecting is the navigation `/auth/git/{provider}/start`; disconnecting is `DELETE /git/providers/{provider}/connection`.