fabric · Capability

fabric Identity — Authentication

fabric Identity — Authentication. 2 operations. Lead operation: Authorize User App with and Without PKCE. Self-contained Naftiko capability covering one fabric business surface.

fabric Identity — Authentication is a Naftiko capability published by fabric, one of 25 capabilities the APIs.io network indexes for this provider. It bundles 2 operations across the GET and POST methods rooted at /v1/oauth2.

The capability includes 1 read-only operation and 1 state-changing operation. Lead operation: Authorize User App with and Without PKCE. Can be deployed as a REST endpoint, MCP tool, or Agent Skill via Naftiko.

Tagged areas include Fabric and Authentication.

Run with Naftiko FabricAuthentication

What You Can Do

GET
Authorize user app with and without pkce — Authorize User App with and Without PKCE
/v1/oauth2/default/v1/authorize
POST
Fetch access token — Fetch Access Token
/v1/oauth2/{authServerId}/v1/token

MCP Tools

fabric-authorize-user-app-with-and-without-pkce

Authorize User App with and Without PKCE

read-only idempotent
fabric-fetch-access-token

Fetch Access Token

Capability Spec

identity-authentication.yaml Raw ↑ 
naftiko: 1.0.0-alpha2
info:
  label: fabric Identity — Authentication
  description: 'fabric Identity — Authentication. 2 operations. Lead operation: Authorize User App with and Without PKCE. Self-contained Naftiko capability covering one fabric business surface.'
  tags:
  - Fabric
  - Authentication
  created: '2026-05-25'
  modified: '2026-05-25'
binds:
- namespace: env
  keys:
    FABRIC_ACCESS_TOKEN: FABRIC_ACCESS_TOKEN
capability:
  consumes:
  - type: http
    namespace: identity-authentication
    baseUri: https://{customer_name}.login.fabric.inc
    description: fabric Identity — Authentication consumed operations from fabric-identity-openapi.yml.
    resources:
    - name: oauth2-default-v1-authorize
      path: /oauth2/default/v1/authorize
      operations:
      - name: authorize-user-app-with-and-without-pkce
        method: GET
        description: 'Authorize User App with and Without PKCE'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: oauth2-authserverid-v1-token
      path: /oauth2/{authServerId}/v1/token
      operations:
      - name: fetch-access-token
        method: POST
        description: 'Fetch Access Token'
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: authServerId
          in: path
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: bearer
      value: '{{env.FABRIC_ACCESS_TOKEN}}'
      placement: header
  exposes:
  - type: rest
    namespace: identity-authentication-rest
    port: 8080
    description: REST adapter for fabric Identity — Authentication. One Spectral-compliant resource per consumed operation, prefixed with /v1.
    resources:
    - path: /v1/oauth2/default/v1/authorize
      name: oauth2-default-v1-authorize
      description: REST surface for oauth2-default-v1-authorize.
      operations:
      - method: GET
        name: authorize-user-app-with-and-without-pkce
        description: 'Authorize User App with and Without PKCE'
        call: identity-authentication.authorize-user-app-with-and-without-pkce
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/oauth2/{authServerId}/v1/token
      name: oauth2-authserverid-v1-token
      description: REST surface for oauth2-authserverid-v1-token.
      operations:
      - method: POST
        name: fetch-access-token
        description: 'Fetch Access Token'
        call: identity-authentication.fetch-access-token
        with:
          authServerId: rest.path.authServerId
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: identity-authentication-mcp
    port: 9090
    transport: http
    description: MCP adapter for fabric Identity — Authentication. One tool per consumed operation, routed inline through this capability's consumes block.
    tools:
    - name: fabric-authorize-user-app-with-and-without-pkce
      description: 'Authorize User App with and Without PKCE'
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: identity-authentication.authorize-user-app-with-and-without-pkce
      outputParameters:
      - type: object
        mapping: $.
    - name: fabric-fetch-access-token
      description: 'Fetch Access Token'
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: identity-authentication.fetch-access-token
      with:
        authServerId: tools.authServerId
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.