flows_executor_solve
POST/api/v3//flows/executor/:flow_slug/
Solve the previously retrieved challenge and advanced to the next stage.
Request
Path Parameters
Query Parameters
Querystring as received
- application/json
Body
- AppleChallengeResponseRequest
- AuthenticatorDuoChallengeResponseRequest
- AuthenticatorSMSChallengeResponseRequest
- AuthenticatorStaticChallengeResponseRequest
- AuthenticatorTOTPChallengeResponseRequest
- AuthenticatorValidationChallengeResponseRequest
- AuthenticatorWebAuthnChallengeResponseRequest
- AutoSubmitChallengeResponseRequest
- CaptchaChallengeResponseRequest
- ConsentChallengeResponseRequest
- DummyChallengeResponseRequest
- EmailChallengeResponseRequest
- IdentificationChallengeResponseRequest
- OAuthDeviceCodeChallengeResponseRequest
- OAuthDeviceCodeFinishChallengeResponseRequest
- PasswordChallengeResponseRequest
- PlexAuthenticationChallengeResponseRequest
- PromptChallengeResponseRequest
- UserLoginChallengeResponseRequest
oneOf
Pseudo class for apple response
Possible values: non-empty
Default value: ak-source-oauth-apple
Pseudo class for duo response
Possible values: non-empty
Default value: ak-stage-authenticator-duo
SMS Challenge response, device is set by get_response_instance
Possible values: non-empty
Default value: ak-stage-authenticator-sms
Possible values: non-empty
Pseudo class for static response
Possible values: non-empty
Default value: ak-stage-authenticator-static
TOTP Challenge response, device is set by get_response_instance
Possible values: non-empty
Default value: ak-stage-authenticator-totp
Challenge used for Code-based and WebAuthn authenticators
Possible values: non-empty
Default value: ak-stage-authenticator-validate
selected_challenge
object
Possible values: non-empty
Possible values: non-empty
webauthn
object
WebAuthn Challenge response
Possible values: non-empty
Default value: ak-stage-authenticator-webauthn
response
object
required
Pseudo class for autosubmit response
Possible values: non-empty
Default value: ak-stage-autosubmit
Validate captcha token
Possible values: non-empty
Default value: ak-stage-captcha
Possible values: non-empty
Consent challenge response, any valid response request is valid
Possible values: non-empty
Default value: ak-stage-consent
Possible values: non-empty
Dummy challenge response
Possible values: non-empty
Default value: ak-stage-dummy
Email challenge resposen. No fields. This challenge is always declared invalid to give the user a chance to retry
Possible values: non-empty
Default value: ak-stage-email
Identification challenge
Possible values: non-empty
Default value: ak-stage-identification
Possible values: non-empty
Response that includes the user-entered device code
Possible values: non-empty
Default value: ak-provider-oauth2-device-code
Response that device has been authenticated and tab can be closed
Possible values: non-empty
Default value: ak-provider-oauth2-device-code-finish
Password challenge response
Possible values: non-empty
Default value: ak-stage-password
Possible values: non-empty
Pseudo class for plex response
Possible values: non-empty
Default value: ak-source-plex
Validate response, fields are dynamically created based on the stage
Possible values: non-empty
Default value: ak-stage-prompt
User login challenge
Possible values: non-empty
Default value: ak-stage-user-login
Responses
- 200
- 400
- 403
- application/json
- Schema
- Example (from schema)
Schema
- AccessDeniedChallenge
- AppleLoginChallenge
- AuthenticatorDuoChallenge
- AuthenticatorSMSChallenge
- AuthenticatorStaticChallenge
- AuthenticatorTOTPChallenge
- AuthenticatorValidationChallenge
- AuthenticatorWebAuthnChallenge
- AutosubmitChallenge
- CaptchaChallenge
- ConsentChallenge
- DummyChallenge
- EmailChallenge
- FlowErrorChallenge
- IdentificationChallenge
- OAuthDeviceCodeChallenge
- OAuthDeviceCodeFinishChallenge
- PasswordChallenge
- PlexAuthenticationChallenge
- PromptChallenge
- RedirectChallenge
- ShellChallenge
- UserLoginChallenge
oneOf
Challenge when a flow's active stage calls stage_invalid()
.
flow_info
object
Default value: ak-stage-access-denied
response_errors
object
Special challenge for apple-native authentication flow, which happens on the client.
flow_info
object
Default value: ak-source-oauth-apple
response_errors
object
Duo Challenge
flow_info
object
Default value: ak-stage-authenticator-duo
response_errors
object
SMS Setup challenge
flow_info
object
Default value: ak-stage-authenticator-sms
response_errors
object
Default value: true
Static authenticator challenge
flow_info
object
Default value: ak-stage-authenticator-static
response_errors
object
TOTP Setup challenge
flow_info
object
Default value: ak-stage-authenticator-totp
response_errors
object
Authenticator challenge
flow_info
object
Default value: ak-stage-authenticator-validate
response_errors
object
device_challenges
object[]
required
configuration_stages
object[]
required
WebAuthn Challenge
flow_info
object
Default value: ak-stage-authenticator-webauthn
response_errors
object
registration
object
required
Autosubmit challenge used to send and navigate a POST request
flow_info
object
Default value: ak-stage-autosubmit
response_errors
object
attrs
object
required
Site public key
flow_info
object
Default value: ak-stage-captcha
response_errors
object
Challenge info for consent screens
flow_info
object
Default value: ak-stage-consent
response_errors
object
permissions
object[]
required
additional_permissions
object[]
required
Dummy challenge
flow_info
object
Default value: ak-stage-dummy
response_errors
object
Email challenge
flow_info
object
Default value: ak-stage-email
response_errors
object
Challenge class when an unhandled error occurs during a stage. Normal users are shown an error message, superusers are shown a full stacktrace.
flow_info
object
Default value: ak-stage-flow-error
response_errors
object
Identification challenges with all UI elements
flow_info
object
Default value: ak-stage-identification
response_errors
object
Possible values: [authentication
, authorization
, invalidation
, enrollment
, unenrollment
, recovery
, stage_configuration
]
sources
object[]
OAuth Device code challenge
flow_info
object
Default value: ak-provider-oauth2-device-code
response_errors
object
Final challenge after user enters their code
flow_info
object
Default value: ak-provider-oauth2-device-code-finish
response_errors
object
Password challenge UI fields
flow_info
object
Default value: ak-stage-password
response_errors
object
Challenge shown to the user in identification stage
flow_info
object
Default value: ak-source-plex
response_errors
object
Initial challenge being sent, define fields
flow_info
object
Default value: ak-stage-prompt
response_errors
object
fields
object[]
required
Challenge type to redirect the client
flow_info
object
Default value: xak-flow-redirect
response_errors
object
challenge type to render HTML as-is
flow_info
object
Default value: xak-flow-shell
response_errors
object
Empty challenge
flow_info
object
Default value: ak-stage-user-login
response_errors
object
{}
- application/json
- Schema
- Example (from schema)
Schema
Validation Error
{
"non_field_errors": [
"string"
],
"code": "string"
}
- application/json
- Schema
- Example (from schema)
Schema
{
"detail": "string",
"code": "string"
}
- curl
- python
- go
- nodejs
- ruby
- csharp
- php
- java
- powershell
- CURL
curl -L '/api/v3/flows/executor/:flow_slug/' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer <TOKEN>' \
-d '{
"component": "ak-source-oauth-apple"
}'