Chelabase
ManagementMembers

Decline a sign-up

POST
/v1/members/{member_id}/decline

The pending member becomes removed (one member_declined event), then, as for a removal, their personal logins are revoked, their account's sessions end when they are an active member of no other tenant, and the account is banned when no other tenant holds them at all. A still-valid token is refused at once. Every step runs even when one fails; declining a removed member again redoes those steps.

Authorization

bearer
AuthorizationBearer <token>

In: header

Path Parameters

member_id*string

Member id

Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/members/497f6eca-6276-4993-bfeb-53cbbbba6f08/decline"
Empty

Approve a sign-up POST

A person who signed up under open sign-up is `pending` and can do nothing (`pending_approval`) until a tenant admin approves them here, with their first grants. The grants are checked exactly as an invite's are; the member becomes `active`, the grants are stored and one `member_approved` event is written in one step.

List a member's personal logins GET

Any status. Filtered by the caller: a member sees all of their own, a tenant admin all of anyone's, an Admin of a project the logins on that project's databases; anyone else gets an empty list. Never a password or verifier.