API reference

Propose

Management API contract View .md

POST/v1/policies/reviews

Authentication Bearer access token with audience taifa-management. Roles and local eligibility are reviewed separately from the OpenAPI bearer scheme.

Parameters

Name	In	Type	Required	Description
`idempotency-key`	header	`string`	Yes

Request body

application/jsonRequiredProposal

Field	Type	Required	Description
`reason`	`string`	Yes	Validation: min length 8; max length 500
`accessTokenLifespan`	`integer`	Yes	Validation: minimum 60; maximum 3600
`ssoSessionIdleTimeout`	`integer`	Yes	Validation: minimum 60; maximum 28800
`ssoSessionMaxLifespan`	`integer`	Yes	Validation: minimum 300; maximum 86400

Responses

200Successful Response

Content type: application/jsonUnspecified response schema

No fields declared in the current specification.

Other responses

Status	Description	Schema
422	Validation Error	`HTTPValidationError`

Request example

Illustrative only. TypeScript runs in Node.js on the server. Keep management tokens out of browser bundles. Replace the host, token, path values, and any header or required body placeholders before use. Examples do not send requests.

curl -X POST 'https://YOUR_IDENTITY_HOST/v1/policies/reviews' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'idempotency-key: REPLACE_WITH_IDEMPOTENCY_KEY' \
  -H 'Content-Type: application/json' \
  --data '{
  "reason": "REPLACE_WITH_REASON",
  "accessTokenLifespan": 0,
  "ssoSessionIdleTimeout": 0,
  "ssoSessionMaxLifespan": 0
}'

Response example

No response example in the current specification.

All Reviewed authentication policy operations