API reference
Detail
GET/v1/projects/{project_id}/lifecycle-service-grants/{grant_id}
Authentication Bearer access token with audience taifa-management. Roles and local eligibility are reviewed separately from the OpenAPI bearer scheme.
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
project_id | path | string | Yes | |
grant_id | path | string | Yes |
Request body
This operation has no request body.
Responses
200Successful Response
Content type: application/jsonGrantRead
| Field | Type | Required | Description |
|---|---|---|---|
id | string | Yes | |
project_id | string | Yes | |
issuer | string | Yes | |
subject | string | Yes | |
capability | lifecycle-consumer | Yes | |
status | pending_review | effective | revoked | Yes | |
active | boolean | Yes | |
version | integer | Yes | Validation: minimum 1; maximum 3 |
proposal_digest | string | Yes | Validation: pattern ^[a-f0-9]{64}$ |
proposer | string | Yes | |
approver | string | null | Yes | |
proposal_audit_id | string | Yes | |
approval_audit_id | string | null | Yes | |
revocation_audit_id | string | null | Yes | |
created_at | string · date-time | Yes | |
approved_at | string | null | Yes | |
revoked_at | string | null | Yes |
Other responses
| Status | Description | Schema |
|---|---|---|
| 422 | Validation Error | HTTPValidationError |
Request example
Illustrative only. TypeScript runs in Node.js on the server. Keep management tokens out of browser bundles. Replace the host, token, path values, and any header or required body placeholders before use. Examples do not send requests.
curl -X GET 'https://YOUR_IDENTITY_HOST/v1/projects/REPLACE_WITH_PROJECT_ID/lifecycle-service-grants/REPLACE_WITH_GRANT_ID' \
-H 'Authorization: Bearer YOUR_ACCESS_TOKEN'Response example
No response example in the current specification.