API

Discover member sign-in availability

Generated from the checked-in source. Do not edit this reference by hand.

GET /api/v1/auth/config

Public capability discovery only. password_login and browser_token_login advertise the configured password and existing user-token browser sign-in transports. A missing browser_token_login field on an older Gateway does not establish support. This response does not disclose identities, credentials or upstream merchant status, and is not proof of deployed HTTPS/browser acceptance. Response carries Cache-Control: no-store.

Operation: getMemberAuthenticationConfiguration.

Authentication

No OpenAPI security scheme is required. Other request validation still applies.

[]

HTTP request

Set NIU_ORIGIN to your installation origin (without /v1). Replace path, query and header placeholders with the required values. Query examples use curl 7.87 or newer to encode values with --url-query. Use the credential scope described above; a bearer token must have the authority required by this operation.

curl --fail-with-body -X GET "$NIU_ORIGIN/api/v1/auth/config"

Parameters

No path, query, or header parameters are declared.

Request body

No request body is declared.

Responses

HTTP 200

Local password sign-in capability.

Response headers:

{
  "Cache-Control": {
    "schema": {
      "type": "string",
      "const": "no-store"
    }
  }
}

Content type: application/json.

{
  "type": "object",
  "required": [
    "password_login",
    "browser_token_login"
  ],
  "properties": {
    "password_login": {
      "type": "boolean"
    },
    "browser_token_login": {
      "type": "boolean"
    },
    "demo_login": {
      "type": "boolean"
    }
  }
}

Behavior and supported scope

Supported scope: implemented