Skip to main content

API access control: Explaining events and how to react

Updated over 2 months ago

Each of the following events may trigger a connection blockage to prevent misuse of the Public API feature.

Please note: Connections with clientId = test.client are not included in this validation.

Event

Action

The Organisation is deleted

In response to all called API requests, the Public API returns errors.

The Organisation is disconnected from GL

GET methods are allowed to be used.
POST/PUT/DELETE methods result in errors from the backend (no restrictions on the Public API side).

After reconnecting, the restrictions are disabled.

The Organisation is retired

GET methods are allowed to be used.
POST/PUT/DELETE methods result in errors from the backend (no restrictions on the Public API side).

After reconnecting, the restrictions are disabled.

The Organisation(s) is transferred (due to account transfer/Organisation transfer)

In response to all called API requests, the Public API returns errors.

The Subscription is downgraded

In response to all called API requests, the Public API returns errors. After a subscription upgrade, the restrictions are disabled.

The Subscription is expired

GET methods are allowed to be used.
POST/PUT/DELETE methods result in errors from the backend (no restrictions on the Public API side).

After reconnecting, the restrictions are disabled.

The user who was added to a token is offboarded from the Organisation added to a token

In response to all called API requests, the Public API returns errors. After onboarding a user, the restrictions are disabled.

The user's role (who was added to a token) is changed

In response to all called API requests, the Public API returns errors. After onboarding a user, the restrictions are disabled.


Did this answer your question?