List objects reachable by a subject and relation.

POST

/api/rebac/list-objects

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/rebac/list-objects \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "tenant_id": "tenant_123", "user_id": "user:user_123", "relation": "viewer", "object_type": "document", "limit": 100 }'

Authorizations

• bearerAuth

Request Body ^required

Media type application/json

object

tenant_id

required

string

user_id

required

string

relation

required

string

object_type

required

string

limit

integer

cursor

string

Example

{
  "tenant_id": "tenant_123",
  "user_id": "user:user_123",
  "relation": "viewer",
  "object_type": "document",
  "limit": 100
}

Responses

200

Successful JSON response.

Media type application/json

object

objects

required

Array<string>

next_cursor

string

key

additional properties

Example

{
  "objects": [
    "document:doc_123"
  ],
  "next_cursor": "cursor_123"
}