Authentication

Obtain a short-lived Bearer access token. Use Method A (username/password) for interactive or first-time access; use Method B (Personal Access Token exchange) for automated/service integrations. Pass the resulting token in the Authorization: Bearer <access_token> header on every other request.

Method A — Username / password login

post

Log in with your username and password. The response contains the accessToken used as the Bearer token on subsequent calls, plus an idToken and refreshToken. Use this method for interactive or first-time access.

Body

usernamestringRequiredExample: <username>

passwordstring · passwordRequiredExample: <password>

Responses

200

Authentication succeeded.

application/json

accessTokenstringOptionalExample: <access_token>

idTokenstringOptionalExample: <id_token>

refreshTokenstringOptionalExample: <refresh_token>

tokenTypestringOptionalExample: Bearer

expiresInintegerOptionalExample: 86400

scopestringOptionalExample: openid profile email offline_access

expiresAtstringOptionalExample: 2024-04-23T04:45:11.625+00:00

post/lineajeidentity/api/v1/login

POST /lineajeidentity/api/v1/login HTTP/1.1
Host: lineaje-identity-service.v2.prod.veedna.com
Content-Type: application/json
Accept: */*
Content-Length: 49

{
  "username": "<username>",
  "password": "<password>"
}

200

Authentication succeeded.

{
  "accessToken": "<access_token>",
  "idToken": "<id_token>",
  "refreshToken": "<refresh_token>",
  "tokenType": "Bearer",
  "expiresIn": 86400,
  "scope": "openid profile email offline_access",
  "expiresAt": "2024-04-23T04:45:11.625+00:00"
}

Method B — Exchange a PAT for an access token

post

Exchange a Lineaje Personal Access Token (PAT) — a long-lived refresh token — for a short-lived access token. Pass the PAT as the refreshToken query parameter; the request body is the JSON literal null. Use this method for automated/service integrations.

The access token is short-lived (expires_in seconds, default 3600 = 1 hour); request a new one before it expires. If the response includes a refresh_token, replace your stored PAT with it for the next exchange. Keep your PAT secret (supply it via an environment variable such as LINEAJE_PAT_TOKEN). The renew endpoint can be overridden with LINEAJE_RENEW_ACCESS_TOKEN_URL for a non-default identity service.

Query parameters

refreshTokenstringRequired

Your Lineaje Personal Access Token (PAT).

Example: <LINEAJE_PAT_TOKEN>

Body

any · nullableOptional

Responses

200

Access token issued (and a rotated PAT, when returned).

application/json

access_tokenstringOptionalExample: eyJhbGciOiJ...

refresh_tokenstringOptional

Rotated refresh token, if returned.

Example: <rotated refresh token, if returned>

expires_inintegerOptional

Seconds until the access token expires (default 3600).

Example: 3600

post/lineajeidentity/api/v1/auth/native/renew-access-token

POST /lineajeidentity/api/v1/auth/native/renew-access-token?refreshToken=text HTTP/1.1
Host: lineaje-identity-service.v2.prod.veedna.com
Content-Type: application/json
Accept: */*

200

Access token issued (and a rotated PAT, when returned).

{
  "access_token": "eyJhbGciOiJ...",
  "refresh_token": "<rotated refresh token, if returned>",
  "expires_in": 3600
}