List forum-user-credentials

GET

/forum-user-credentials

• Current canonical versioned path (F3.API.01)

JIT-provisioned mapping between a Keycloak user (kc_sub = preferred_username claim) and their auto-created Lemmy account (F4.FORUM.02). Holds an AES-256-GCM encrypted internal Lemmy password — service-only, never exposed to end users, forum-connector is the sole consumer.

Authorizations

• bearerAuth
• apiTokenAuth

Parameters

Query Parameters

pagination[page]

integer

pagination[pageSize]

integer

filters

Strapi REST filter syntax

object

sort

string

populate

string

Responses

200

OK

object

data

Array

object

kc_sub

required

Keycloak preferred_username claim — the stable per-user key forum-connector looks up on every visit.

string

>= 1 characters <= 255 characters

lemmy_username

required

Sanitized Lemmy-safe username actually registered in Lemmy ([a-zA-Z0-9_], 3-20 chars).

string

>= 3 characters <= 20 characters

encrypted_password

required

AES-256-GCM encrypted internal Lemmy password (format iv:authTag:ciphertext:salt). NEVER returned in any API response. Decrypted only by forum-connector to perform Lemmy login on repeat visits.

string

is_lemmy_admin

required

Mirrors current Lemmy admin flag — set by F4.FORUM.03 (KC role forum-admin mapping).

boolean

last_login_at

string format: date-time

documentId

string

id

integer

createdAt

string format: date-time

updatedAt

string format: date-time

publishedAt

string format: date-time

nullable

meta

object

pagination

object

page

integer

pageSize

integer

pageCount

integer

total

integer

401

Missing or invalid authentication

403

Not authorized (tenant scope or capability)