# Authelia API

**Canonical:** https://apis.io/apis/authelia/authelia-api/  
**Provider:** Authelia — https://apis.io/providers/authelia/  
**Base URL:** https://auth.example.com  
**Documentation:** https://www.authelia.com/reference/

Authelia API is one of 4 APIs that [Authelia](https://apis.io/providers/authelia/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Authentication, Authorization, MFA, OpenID Connect, and SSO. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and a GitHub repository.

The full first-party Authelia HTTP API — the portal, authorization, authentication, second factor, user information, session elevation, password reset/change and OpenID Connect 1.0 surfaces. Described by Authelia's own OpenAPI 3.2.0 contract (42 paths, 78 operations, 100 schemas), published in the Authelia repository at api/openapi.yml and served by each deployment. Authelia is self-hosted, so the base URL is the operator's own deployment host; auth.example.com is the default Authelia's own contract template uses.

## Operations (60 of 76)

| Method | Path | Summary |
|---|---|---|
| GET | `/api/configuration` | Application Configuration |
| GET | `/api/configuration/password-policy` | Password Policy Configuration |
| HEAD | `/api/health` | Application Health |
| GET | `/api/health` | Application Health |
| GET | `/api/state` | User Application State |
| GET | `/api/authz/auth-request` | Authorization Verification (AuthRequest) |
| HEAD | `/api/authz/auth-request` | Authorization Verification (AuthRequest) |
| GET | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| HEAD | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| OPTIONS | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| POST | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| PUT | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| PATCH | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| DELETE | `/api/authz/ext-authz` | Authorization Verification (ExtAuthz) |
| GET | `/api/authz/forward-auth` | Authorization Verification (ForwardAuth) |
| HEAD | `/api/authz/forward-auth` | Authorization Verification (ForwardAuth) |
| GET | `/api/verify` | Authorization Verification (Legacy) |
| HEAD | `/api/verify` | Authorization Verification (Legacy) |
| OPTIONS | `/api/verify` | Authorization Verification (Legacy) |
| POST | `/api/verify` | Authorization Verification (Legacy) |
| PUT | `/api/verify` | Authorization Verification (Legacy) |
| PATCH | `/api/verify` | Authorization Verification (Legacy) |
| DELETE | `/api/verify` | Authorization Verification (Legacy) |
| POST | `/api/firstfactor` | Login |
| POST | `/api/firstfactor/reauthenticate` | Reauthenticate |
| GET | `/api/firstfactor/passkey` | First Factor Authentication - Passkey |
| POST | `/api/firstfactor/passkey` | First Factor Authentication - Passkey |
| POST | `/api/checks/safe-redirection` | Check whether URI is safe to redirect to. |
| POST | `/api/logout` | Logout |
| POST | `/api/change-password` | Password Change |
| POST | `/api/reset-password/identity/start` | Identity Verification Token Creation |
| POST | `/api/reset-password/identity/finish` | Identity Verification Token Validation |
| POST | `/api/reset-password` | Password Reset |
| DELETE | `/api/reset-password` | Password Reset |
| GET | `/api/user/info` | User Configuration |
| POST | `/api/user/info` | User Configuration |
| POST | `/api/user/info/2fa_method` | User Configuration |
| GET | `/api/user/session/elevation` | User Session Elevation |
| POST | `/api/user/session/elevation` | User Session Elevation |
| PUT | `/api/user/session/elevation` | User Session Elevation |
| DELETE | `/api/user/session/elevation/{id}` | User Session Elevation |
| GET | `/api/secondfactor/totp/register` | TOTP Configuration Register |
| PUT | `/api/secondfactor/totp/register` | TOTP Configuration Register |
| POST | `/api/secondfactor/totp/register` | TOTP Configuration Register |
| DELETE | `/api/secondfactor/totp/register` | TOTP Configuration Register |
| GET | `/api/secondfactor/totp` | TOTP Configuration |
| POST | `/api/secondfactor/totp` | Second Factor Authentication - TOTP |
| DELETE | `/api/secondfactor/totp` | Second Factor Authentication - TOTP |
| GET | `/api/secondfactor/webauthn` | Second Factor Authentication - WebAuthn |
| POST | `/api/secondfactor/webauthn` | Second Factor Authentication - WebAuthn |
| GET | `/api/secondfactor/webauthn/credentials` | WebAuthn Credentials |
| PUT | `/api/secondfactor/webauthn/credential/register` | WebAuthn Credential Registration (Attestation) |
| POST | `/api/secondfactor/webauthn/credential/register` | WebAuthn Credential Registration (Attestation) |
| DELETE | `/api/secondfactor/webauthn/credential/register` | WebAuthn Credential Registration (Attestation) |
| PUT | `/api/secondfactor/webauthn/credential/{credentialID}` | WebAuthn Credential |
| DELETE | `/api/secondfactor/webauthn/credential/{credentialID}` | WebAuthn Credential |
| GET | `/api/secondfactor/duo` | Second Factor Authentication - Duo Mobile Push |
| POST | `/api/secondfactor/duo` | Second Factor Authentication - Duo Mobile Push |
| GET | `/api/secondfactor/duo_devices` | Second Factor Authentication - Duo Mobile Push |
| POST | `/api/secondfactor/duo_device` | Second Factor Authentication - Duo Mobile Push |

…and 16 more operations. They are listed in full on the page.

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/authelia/refs/heads/main/openapi/authelia-api-openapi.yml
- **Overlay** — https://raw.githubusercontent.com/api-evangelist/authelia/refs/heads/main/overlays/authelia-api-overlay.yaml
- **Documentation** — https://www.authelia.com/reference/
- **GitHubRepository** — https://github.com/authelia/authelia

## Other Authelia APIs (3)

- [Authelia OpenID Connect 1.0 Provider](https://apis.io/apis/authelia/authelia-oidc-provider/)
- [Authelia Discovery API](https://apis.io/apis/authelia/authelia-discovery-api/)
- [Authelia OIDC API](https://apis.io/apis/authelia/authelia-oidc-api/)

## Tags

Authentication, Authorization, MFA, OpenID Connect, SSO

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/authelia/authelia-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/authelia/.