Read the authenticated Application
Requires an app token obtained with private-key client authentication or a trusted issuer JWT-bearer exchange. It grants no customer data access.
bearerAuthAuthorizationBearer <token>Success
application/json- response
The configuration and status of an Application. An Application belongs to one Project and cannot move to another. You cannot use the ID of a deleted Application again.
configuration*The exact redirect URIs and the resource scopes that the Application can request. The Application calls the API of the stack that owns its Project. Each user still approves the scopes, and the user's current permissions still apply. setupUrl returns the browser after installation setup. It uses HTTPS (or HTTP on loopback) and receives installation_id, setup_action and optional state; the Application checks the actual grant through the API. redirectOnUpdate also returns after changes to an existing installation; it defaults to false and requires setupUrl. installOnSignIn defaults to false. When enabled, sign-in requires an active installation and lets an Organization owner install during user consent. allowedCorsOrigins lists the exact browser origins (scheme, host and port) whose scripts may obtain tokens and call ScanDAL as the Application.
id*stringorganizationId*stringprojectId*stringstatus*apps.ApplicationStatus"active""suspended""deleted"curl -X GET 'https://api.spiraldb.dev/api/apps/self'{ "configuration": { "allowedCorsOrigins": [ "string" ], "audience": "internal", "backgroundIdentity": { "audience": "string", "claims": { "property1": "string", "property2": "string" }, "issuer": "string" }, "enabled": true, "installOnSignIn": true, "jwks": null, "jwtBearerIssuers": [ { "audience": "string", "claims": { "property1": "string", "property2": "string" }, "issuer": "string" } ], "name": "string", "redirectOnUpdate": true, "redirectUris": [ "string" ], "scopes": [ "string" ], "setupUrl": "string" }, "id": "string", "organizationId": "string", "projectId": "string", "status": "active"}