Application access HTTP API
Documentation version: 858adedd187db2e94614b1dfd389e4bf98e6e202:ac5d527caaa1f97eee9d71262e7c843ae7b24000e01ba5b44931108b2b489c0d
Generated from the canonical OpenAPI 0.1.0 contract. Source SHA256: 764c85e702f4b1b5618d7c4d0dd0dd8159117a25e80950464da1618013a36c45. This describes implemented transport shapes; installation capability, grants and validated profile still govern availability.
POST exchangeDatabaseSession
POST /v1/database/session
Server-only data-gateway exchange. The verified service credential needs database.session.issue plus an exact registered actor/app binding. The configured authority validates the forwarded cookie and native app grants still apply. A customer cookie domain never needs to cover the infrastructure domain.
Authentication: managementToken.
Request body (required):
application/json: CreateDatabaseSession
| Response | Meaning | Body |
|---|---|---|
| 200 | Scoped native application session | application/json: DatabaseSessionToken |
| 401 | Credential, issuer binding or authority session denied | No documented body |
| 503 | Configured authority, native engine or secret store unavailable | No documented body |
POST probeDatabase
POST /v1/database/probe
Server-only scoped probe of the registered native app credential and SQL/schema access. No customer records or secrets are returned.
Authentication: managementToken.
Request body (required):
application/json: CreateDatabaseProbe
| Response | Meaning | Body |
|---|---|---|
| 200 | Registered app is reachable | application/json: DatabaseProbe |
| 401 | Scoped observer denied | No documented body |
| 503 | Native dependency unavailable | No documented body |
POST createHostedDatabaseSession
POST /__astrogate/database-session
Issue an existing native database session for the exact protected application hostname and authenticated application user. No management credential is accepted.
Authentication: hostedSession.
| Response | Meaning | Body |
|---|---|---|
| 200 | Native application-scoped session | application/json: DatabaseSessionToken |
| 401 | Application authentication required | No documented body |
| 403 | Application/database scope denied | No documented body |
POST reserveStorageUpload
POST /v1/storage/{blockId}/uploads
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
Idempotency-Key | header | Yes | {"type":"string"} |
Request body (required):
application/json: CreateStorageUpload
| Response | Meaning | Body |
|---|---|---|
| 201 | Scoped application result | application/json: StorageObject |
| default | Scoped access or engine failure | application/json: Error |
PUT uploadStorageObject
PUT /v1/storage/{blockId}/objects/{objectId}
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
Request body (required):
application/octet-stream:{"type":"string","format":"binary"}
| Response | Meaning | Body |
|---|---|---|
| 200 | Scoped application result | application/json: StorageObject |
| default | Scoped access or engine failure | application/json: Error |
GET downloadStorageObject
GET /v1/storage/{blockId}/objects/{objectId}
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 200 | Scoped streaming download | application/octet-stream: {"type":"string","format":"binary"} |
| default | Scoped access or engine failure | application/json: Error |
DELETE deleteStorageObject
DELETE /v1/storage/{blockId}/objects/{objectId}
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 204 | Completed | No documented body |
| default | Scoped access or engine failure | application/json: Error |
GET getStorageObject
GET /v1/storage/{blockId}/objects/{objectId}/metadata
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 200 | Scoped application result | application/json: StorageObject |
| default | Scoped access or engine failure | application/json: Error |
POST attachStorageReference
POST /v1/storage/{blockId}/objects/{objectId}/references
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
Request body (required):
application/json: StorageReference
| Response | Meaning | Body |
|---|---|---|
| 204 | Completed | No documented body |
| default | Scoped access or engine failure | application/json: Error |
DELETE detachStorageReference
DELETE /v1/storage/{blockId}/objects/{objectId}/references
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
objectId | path | Yes | {"type":"string"} |
Request body (required):
application/json: StorageReference
| Response | Meaning | Body |
|---|---|---|
| 204 | Completed | No documented body |
| default | Scoped access or engine failure | application/json: Error |
POST runApplicationJob
POST /v1/jobs/{blockId}/runs
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
Idempotency-Key | header | Yes | {"type":"string"} |
Request body (required):
application/json: ApplicationJobRun
| Response | Meaning | Body |
|---|---|---|
| 202 | Scoped application result | application/json: Accepted |
| default | Scoped access or engine failure | application/json: Error |
GET getApplicationJobRun
GET /v1/jobs/{blockId}/runs/{runId}
Authentication: applicationSession or blockSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
runId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 200 | Scoped application result | application/json: JobRunState |
| default | Scoped access or engine failure | application/json: Error |
POST issueStorageSession
POST /v1/storage/{blockId}/session
Authentication: applicationSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 200 | Resource-bound session, never the native login cookie | application/json: ServiceSession |
| default | Access or authority failure | application/json: Error |
POST issueJobsSession
POST /v1/jobs/{blockId}/session
Authentication: applicationSession.
| Parameter | Location | Required | Type |
|---|---|---|---|
blockId | path | Yes | {"type":"string"} |
| Response | Meaning | Body |
|---|---|---|
| 200 | Resource-bound session, never the native login cookie | application/json: ServiceSession |
| default | Access or authority failure | application/json: Error |