EGP User Account Service
  1. Authentication
EGP User Account Service
  • Overview
  • Invitations
    • Accept an organization invitation
      POST
    • Send an invitation to join an organization
      POST
  • Authentication
    • Login with email/password
      POST
    • Register a new global user
      POST
    • Exchange user token for service token
      POST
    • Get a challenge for Web3 signing
      POST
    • Verify Web3 signature and login
      POST
  • Organizations
    • Create a new organization
      POST
    • Get organization details
      GET
    • Get organization settings
      GET
    • Update organization settings
      PUT
    • List members of an organization
      GET
    • Directly add an existing user to the organization
      POST
    • Remove a member from an organization
      DELETE
    • Get a specific member's details
      GET
    • Update a member's role
      PUT
  • SSO
    • Request Challenge for Web3 SSO (EVM Only)
      POST
    • Initiate Web3 SSO Flow (IdP Start)
      GET
    • Verify SIWE Signature & Issue Token for Web3 SSO (EVM Only)
      POST
  • Applications
    • Delete an application
      DELETE
    • Get application details
      GET
    • Update application details
      PUT
    • List applications within an organization
      GET
    • Create an application within an organization
      POST
  • API Keys
    • Revoke an API key
    • List API keys for an application
    • Generate an API key for an application
  • User Self-Service
    • Get current user's profile
    • Update current user's profile
    • Update current user's password
  • Custom System Data
    • List users with custom system data
    • Get user's custom system data
    • Set/Update user's custom system data
  • Custom Data
    • Get user's custom data
    • Set/Update user's custom data
  • Inventory
    • List inventory items for an application
    • Create or update an inventory item
  1. Authentication

Exchange user token for service token

POST
/api/v1/auth/token/exchange
Exchanges a valid user JWT (HMAC) for a new service-specific JWT (RSA-signed) containing organization roles.
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request POST 'https://useraccounts.srblabs.io/api/v1/auth/token/exchange' \
--header 'Content-Type: application/json' \
--data-raw '{
    "audience": "string",
    "organization_id": "string"
}'
Response Response Example
200 - Example 1
{
    "service_token": "string"
}

Request

Body Params application/json

Examples

Responses

🟢200OK
application/json
Service token successfully generated
Body

🟠400Bad Request
🟠401Unauthorized
🟠403Forbidden
🟠404Record Not Found
🔴500Server Error
Modified at 2025-05-03 01:39:15
Previous
Register a new global user
Next
Get a challenge for Web3 signing