Skip to content

Write a ReBAC relationship tuple.

POST
/api/rebac/write
Code sample: Shell / cURL
curl --request POST \
--url https://auth.example.com/api/rebac/write \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "tenant_id": "tenant_123", "object_type": "document", "object_id": "doc_123", "relation": "viewer", "subject_type": "user", "subject_id": "user_123" }'

Creates or updates a relationship tuple used by relationship-based authorization checks and invalidates related cache entries.

Media type application/json
object
tenant_id
required
string
object_type
required
string
object_id
required
string
relation
required
string
subject_type
required
string
subject_id
required
string
expires_at
integer
Example
{
"tenant_id": "tenant_123",
"object_type": "document",
"object_id": "doc_123",
"relation": "viewer",
"subject_type": "user",
"subject_id": "user_123"
}

Successful JSON response.

Media type application/json
object
success
required
boolean
tuple
required
object
key
additional properties
Example
{
"success": true,
"tuple": {
"id": "rel_123",
"tenant_id": "tenant_123",
"object_type": "document",
"object_id": "doc_123",
"relation": "viewer",
"subject_type": "user",
"subject_id": "user_123",
"created_at": 1770000000
}
}