Dependency-Track unofficial
POST/v1/user/oidc/login

Authenticate with an OpenID Connect token

Authenticates an OpenID Connect user by validating an idToken. Send the request as form-encoded data; include accessToken if your authentication flow requires it. A successful response provides a bearer token for REST API authentication.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

2 body fields

Form-encoded OpenID Connect token data.

accessTokenstringoptional
An OAuth2 access token.
idTokenstringrequired
An OAuth2 access token

4 status codes
200Returns a bearer token as plain text for authenticating with the REST API.
204Returns no content.
401Returned when authentication is unauthorized.
403Returned when access is forbidden.

Error handling

The idToken field is required. A 401 is returned when authentication is unauthorized, and a 403 is returned when access is forbidden.