Zeq Auth (OIDC broker)
20 live operations under /api/zeq-auth. 0 require a machine key; 20 are public. Tagged: Other.
| Method | Path | What it does | Auth |
|---|---|---|---|
DELETE | /api/zeq-auth/api-key | — | public |
GET | /api/zeq-auth/api-key | — | public |
POST | /api/zeq-auth/api-key | — | public |
GET | /api/zeq-auth/api-keys | List API keys for authenticated user | public |
POST | /api/zeq-auth/api-keys | Create API key for authenticated ZeqAuth user | public |
POST | /api/zeq-auth/equation-reissue | — | public |
GET | /api/zeq-auth/genesis-claimed | — | public |
GET | /api/zeq-auth/health | — | public |
POST | /api/zeq-auth/login-v3 | — | public |
POST | /api/zeq-auth/logout-v3 | — | public |
GET | /api/zeq-auth/me | alias of /profile (ZID + identity card) | public |
GET | /api/zeq-auth/profile | — | public |
DELETE | /api/zeq-auth/recovery-password | — | public |
GET | /api/zeq-auth/recovery-password | — | public |
POST | /api/zeq-auth/recovery-password | — | public |
POST | /api/zeq-auth/register-v3 | — | public |
GET | /api/zeq-auth/salt/{zid} | The DB query runs unconditionally, so response timing remains close to the registered path (HMAC is microseconds; DB dom | public |
POST | /api/zeq-auth/session-key/mint | own row), so this never invalidates the key the web app already stored. | public |
GET | /api/zeq-auth/session-key | Per-user doctrine: there is no anonymous tier. | public |
POST | /api/zeq-auth/verify-v3 | Used by the wizard page on load to detect an existing logged-in session. | public |
Generated by scripts/generate-reference.mjs from https://zeq.me/openapi.json.