API Documentation Sources
This document lists all the API sources used to generate and maintain the AuthSec API documentation.
Live API Documentation
User Flow API (User Management)
- API Name: User Flow Multi-Tenant RBAC API
- Version: 4.0.0
- Base URL:
https://dev.api.authsec.dev - Documentation Format: ReDoc
- Live Docs: https://dev.api.authsec.dev/uflow/redoc
- Swagger JSON: https://dev.api.authsec.dev/uflow/swagger.json (if available)
Documented Sections:
- User Management (Admin Users, End Users)
- Authentication flows
- MFA Authentication
- Directory Synchronization
- User invitations
Corresponding Docs: /docs/user-management/
Auth Manager API
- API Name: Auth Manager Server API
- Version: 1.1.0
- Base URL:
https://dev.api.authsec.dev/authmgr - Documentation Format: Swagger UI
- Live Docs: https://dev.api.authsec.dev/authmgr/swagger
- Swagger JSON: https://dev.api.authsec.dev/authmgr/swagger.json
Documented Sections:
- Token Management (JWT generation)
- Token Validation
- Group Management
- User Profile
- Debug endpoints
- Health checks
Corresponding Docs: /docs/auth-manager/
WebAuthn Service API
- API Name: WebAuthn Service API
- Version: 2.0
- Base URL:
https://dev.api.authsec.dev/webauthn - Documentation Format: Swagger UI
- Live Docs: https://dev.api.authsec.dev/webauthn/swagger
- Swagger JSON: https://dev.api.authsec.dev/webauthn/swagger.json (if available)
Documented Sections:
- WebAuthn registration and authentication (Admin and End User flows)
- TOTP setup and verification
- SMS verification
Corresponding Docs: /docs/webauthn-mfa/
Client Management API
- API Name: Clients Microservice API
- Version: 0.4.0
- Base URL:
https://dev.api.authsec.dev/clientms - Documentation Format: Swagger UI
- Live Docs: https://dev.api.authsec.dev/clientms/swagger
- Swagger JSON: https://dev.api.authsec.dev/clientms/swagger/doc.json
Documented Sections:
- Client CRUD operations
- Client status management (activate/deactivate)
- Client filtering and pagination
Corresponding Docs: /docs/client-management/
External Service API
- API Name: External Service API
- Version: 1.0
- Base URL:
https://dev.api.authsec.dev/exsvc - Documentation Format: Swagger UI
- Live Docs: https://dev.api.authsec.dev/exsvc/swagger/index.html
Documented Sections:
- Service lifecycle management (CRUD operations)
- Service credential retrieval
- Authentication debugging utilities
Corresponding Docs: /docs/external-service/
Endpoint to Documentation Mapping
User Flow API Endpoints
| Endpoint Pattern | Documentation File |
|---|---|
/uflow/admin/users/* | admin-users.md |
/uflow/users/* | end-users.md |
/uflow/admin/auth/*, /uflow/auth/* | authentication.md |
/uflow/admin/totp/*, /uflow/admin/webauthn/*, /uflow/admin/ciba/* | mfa-authentication.md |
/uflow/admin/activedirectory/*, /uflow/admin/entra-id/* | directory-sync.md |
/uflow/admin/invitations/* | invitations.md |
Auth Manager Endpoints
| Endpoint Pattern | Documentation File |
|---|---|
/authmgr/auth/*/generateToken | token-management.md |
/authmgr/auth/*/oidcToken | token-management.md |
/authmgr/auth/admin/group/* | groups.md |
/authmgr/validate/* | validation.md |
/authmgr/auth/*/profile | profile.md |
/authmgr/auth/*/debug/* | debug.md |
/authmgr/auth/*/health | system.md |
WebAuthn Service Endpoints
| Endpoint Pattern | Documentation File |
|---|---|
/webauthn/admin/* | webauthn.md |
/webauthn/enduser/* | webauthn.md |
/webauthn/totp/* | totp.md |
/webauthn/sms/* | sms.md |
Client Management Endpoints
| Endpoint Pattern | Documentation File |
|---|---|
/clientms/clients/v1/tenants/{tenantId}/clients | clients.md |
/clientms/clients/v1/tenants/{tenantId}/clients/{id} | clients.md |
/clientms/clients/v1/*/clients/*/activate | client-status.md |
/clientms/clients/v1/*/clients/*/deactivate | client-status.md |
External Service Endpoints
| Endpoint Pattern | Documentation File |
|---|---|
/api/v1/services | services.md |
/api/v1/services/{id} | services.md |
/api/v1/services/{id}/credentials | credentials.md |
/debug/auth | debug.md |
Update Process
Manual Update Workflow
-
Fetch Latest Specs
# User Flow API
curl https://dev.api.authsec.dev/uflow/redoc > uflow-spec.html
# Auth Manager
curl https://dev.api.authsec.dev/authmgr/swagger.json > authmgr-spec.json
# WebAuthn Service
curl https://dev.api.authsec.dev/webauthn/swagger.json > webauthn-spec.json
# Client Management
curl https://dev.api.authsec.dev/clientms/swagger/doc.json > clientms-spec.json -
Parse API Specifications
- Extract endpoint paths, methods, and descriptions
- Identify request/response schemas
- Note authentication requirements
- Document parameter types
-
Update Documentation Files
- Match endpoints to appropriate documentation files (see mapping above)
- Update endpoint descriptions
- Add/remove endpoints as needed
- Update request/response examples
- Verify all links remain valid
-
Test Changes
# Clear cache and rebuild
rm -rf .docusaurus node_modules/.cache
npm start
AI Agent Update Protocol
For automated updates by AI agents, follow the README.md instructions which include:
- Detailed endpoint-to-file mapping
- Markdown structure preservation guidelines
- Code sample formatting requirements
- Consistency checks
Additional Documentation Sources
RBAC & Authorization
- Source: System configuration and role definitions
- Docs:
/docs/roles-permissions/
Advanced Authentication
- Source: OIDC/SAML provider configurations
- Docs:
/docs/advanced-auth/
System & Infrastructure
- Source: Health check endpoints and tenant management
- Docs:
/docs/system/
Version History
| Date | API | Version | Changes |
|---|---|---|---|
| 2026-01-20 | User Flow API | 4.0.0 | Initial documentation |
| 2026-01-20 | Auth Manager | 1.1.0 | Initial documentation |
| 2026-01-20 | WebAuthn Service | 2.0 | Initial documentation |
| 2026-01-20 | Client Management | 0.4.0 | Initial documentation |
| 2026-02-11 | External Service | 1.0 | Initial documentation |
| 2026-02-11 | Documentation | - | Reorganized to user journey structure |
| 2026-02-11 | Documentation | - | Added MagicUI progressive blur effects |
Missing Sources
Currently, all known APIs are documented. If additional microservices are discovered, they will be listed here.
Future Services
- Add any newly discovered microservices here
Contact & Support
For questions about API sources or to report outdated documentation:
- Review Swagger/ReDoc interfaces for the latest endpoint information
- Check version numbers in the live documentation
- Compare with this sources list to identify discrepancies
Last Updated: 2026-02-11
Maintained By: Documentation Team