Reference
Credential Providers
Admin APIs for credential-provider definitions (serviceType, authType, config).
Endpoint Map
| Method | Path | Auth | Purpose |
|---|---|---|---|
GET | /api/v1/credential-providers | JWT + provider:read | List providers |
POST | /api/v1/credential-providers | JWT + provider:create | Create provider |
GET | /api/v1/credential-providers/:id | JWT + provider:read | Get provider |
PUT | /api/v1/credential-providers/:id | JWT + provider:update | Update provider |
DELETE | /api/v1/credential-providers/:id | JWT + provider:delete | Delete provider |
GET | /api/v1/credential-providers/by-service/:serviceType | JWT + provider:read | Resolve by service type (tenant-first fallback) |
Create Provider
POST /api/v1/credential-providers
Authorization: Bearer <jwt>
Content-Type: application/json
{
"serviceType": "gateway_api",
"name": "Gateway API",
"authType": "jwt",
"config": {
"connectUrl": "/auth/connect?service=gateway_api",
"jwt": { "headerName": "Authorization", "prefix": "Bearer " }
}
}Supported authType values: oauth2, api_key, jwt, basic.
Notes
serviceTypemust match^[a-z][a-z0-9_]*$.- Read endpoints redact secret fields from provider config.
- Update merges masked secrets (
"********") with existing stored values. - Tenant scope is enforced by role and tenant context.