Write a ReBAC relationship tuple.

POST

/api/rebac/write

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/rebac/write \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "tenant_id": "tenant_123", "object_type": "document", "object_id": "doc_123", "relation": "viewer", "subject_type": "user", "subject_id": "user_123" }'

Creates or updates a relationship tuple used by relationship-based authorization checks and invalidates related cache entries.

Authorizations

• bearerAuth

Request Body ^required

Media type application/json

object

tenant_id

required

string

object_type

required

string

object_id

required

string

relation

required

string

subject_type

required

string

subject_id

required

string

expires_at

integer

Example

{
  "tenant_id": "tenant_123",
  "object_type": "document",
  "object_id": "doc_123",
  "relation": "viewer",
  "subject_type": "user",
  "subject_id": "user_123"
}

Responses

200

Successful JSON response.

Media type application/json

object

success

required

boolean

tuple

required

object

key

additional properties

Example

{
  "success": true,
  "tuple": {
    "id": "rel_123",
    "tenant_id": "tenant_123",
    "object_type": "document",
    "object_id": "doc_123",
    "relation": "viewer",
    "subject_type": "user",
    "subject_id": "user_123",
    "created_at": 1770000000
  }
}