SSO 配置 upsert(owner/admin;clientSecret 信封加密入库:缺席保留/空串清除/有值替换;enabled=false 停用即吊销)
PUT
/v1/orgs/{id}/sso
Authorizations
Section titled “Authorizations”Request Bodyrequired
Section titled “Request Bodyrequired”Media typeapplication/json
object
issuer
required
OIDC issuer(将拉 {issuer}/.well-known/openid-configuration)
string
clientId
required
string
clientSecret
信封加密入库,读回恒脱敏;缺席 = 保留既有 secret,空串 = 清除(公有客户端)
string
jwksUri
缺省用 discovery 的 jwks_uri
string
enabled
缺省 true;false = 停用即吊销(登录流立即 403)
boolean
Examplegenerated
{ "issuer": "example", "clientId": "example", "clientSecret": "example", "jwksUri": "example", "enabled": true}Responses
Section titled “Responses”已写({sso});secret 恒 ***
Forbidden(角色不够)
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Not_found
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Envelope_key_undelivered(生产缺 TANSR_API_ENVELOPE_KEY,fail-closed)
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}本文是否有帮助?
感谢反馈,我们会持续改进这篇文章。