What the current token is scoped to
The business this session acts for, with the role the server read now. Useful to a dashboard on load, and the smallest endpoint that demonstrates scoping: it names a business without the caller having named one.
The business this session acts for, with the role the server read now.
Useful to a dashboard on load, and the smallest endpoint that demonstrates scoping: it names a business without the caller having named one.
Authorization
OAuth2PasswordBearer In: header
Cookie Parameters
Response Body
application/json
application/json
curl -X GET "https://example.com/api/b/v1/context"{ "business": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "legal_name": "string", "trading_name": "string", "country": "string", "kyb_status": "unverified", "kyb_tier": "tier_0", "created_at": "2019-08-24T14:15:22Z" }, "role": "owner", "status": "string", "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5"}Issue a session token scoped to a business POST
Mint a new token scoped to `business_id`. A new token rather than an amended one: a JWT is signed, so it cannot be re-scoped in place, and issuing a fresh one is what stops the previous scope applying to subsequent calls. Membership is checked here as well as on every later request. Refusing at the point of switching gives the user a clear answer instead of a token that fails on first use.
The KYB document checklist with status and version history GET
Every document slot for the business, with its current status and the retained prior versions - the status history, newest version first.