apiVersion: capabilities.naftiko.dev/v1
kind: Capability
metadata:
name: span-auth
title: SPAN Auth
provider: span-io
api: span-rest-api
tags:
- Authentication
- JWT
- On-Premise
spec:
description: >-
Manage SPAN Panel local API client registrations and JWT tokens. The
panel itself mints bearer tokens bound to a named client; tokens are used
for both REST and MQTT broker authentication.
operations:
- id: register-client
summary: Register an API client and mint a JWT.
method: POST
path: /api/v1/auth/register
- id: list-clients
summary: List registered API clients.
method: GET
path: /api/v1/auth/clients
- id: get-client
summary: Get a single registered client.
method: GET
path: /api/v1/auth/clients/{name}
- id: delete-client
summary: Delete a registered client (revokes its token).
method: DELETE
path: /api/v1/auth/clients/{name}