openapi: 3.0.3
info:
title: Stytch B2B Authentication Application Impersonation API
version: 2.0.0
description: Stytch's B2B API for multi-tenant authentication. Supports Organizations, Members, SSO (SAML/OIDC), Magic Links, OTP, OAuth, Discovery, Sessions, B2B RBAC, SCIM, TOTP, Recovery Codes, Passwords, Impersonation, and the B2B IDP.
contact:
name: Stytch
url: https://stytch.com/docs
license:
name: Proprietary
servers:
- url: https://api.stytch.com
description: Production
- url: https://test.stytch.com
description: Test
tags:
- name: Impersonation
paths:
/v1/impersonation/authenticate:
post:
summary: Authenticate
operationId: api_impersonation_v1_Authenticate
tags:
- Impersonation
description: 'Authenticate an impersonation token to impersonate a User. This endpoint requires an impersonation token that is not expired or previously used.
A Stytch session will be created for the impersonated user with a 60 minute duration. Impersonated sessions cannot be extended.
Prior to this step, you can generate an impersonation token by visiting the Stytch Dashboard, viewing a user, and clicking the `Impersonate User` button.'
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/api_impersonation_v1_AuthenticateRequest'
responses:
'200':
description: Successful response
content:
application/json:
schema:
$ref: '#/components/schemas/api_impersonation_v1_AuthenticateResponse'
'400':
description: Bad request
'401':
description: Unauthorized
content:
application/json:
example:
status_code: 401
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: unauthorized_credentials
error_message: Unauthorized credentials.
error_url: https://stytch.com/docs/api/errors/401
'429':
description: Too Many Requests
content:
application/json:
example:
status_code: 429
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: too_many_requests
error_message: Too many requests have been made.
error_url: https://stytch.com/docs/api/errors/429
'500':
description: Internal server error
content:
application/json:
example:
status_code: 500
request_id: request-id-test-b05c992f-ebdc-489d-a754-c7e70ba13141
error_type: internal_server_error
error_message: Oops, something seems to have gone wrong, please reach out to support@stytch.com to let us know what went wrong.
error_url: https://stytch.com/docs/api/errors/500
x-code-samples:
- lang: csharp
label: C#
source: "// POST /v1/impersonation/authenticate\nconst stytch = require('stytch');\n\nconst client = new stytch.Client({\n project_id: '${projectId}',\n secret: '${secret}',\n});\n\nconst params = {\n impersonation_token: \"${token}\",\n};\n\nclient.Impersonation.Authenticate(params)\n .then(resp => { console.log(resp) })\n .catch(err => { console.log(err) });"
- lang: go
label: Go
source: "// POST /v1/impersonation/authenticate\npackage main\n\nimport (\n\t\"context\"\n\t\"log\"\n\n\t\"github.com/stytchauth/stytch-go/v17/stytch/consumer/impersonation\"\n\t\"github.com/stytchauth/stytch-go/v17/stytch/consumer/stytchapi\"\n)\n\nfunc main() {\n\tclient, err := stytchapi.NewClient(\n\t\t\"${projectId}\",\n\t\t\"${secret}\",\n\t)\n\tif err != nil {\n\t\tlog.Fatalf(\"error instantiating client: %v\", err)\n\t}\n\n\tparams := &impersonation.AuthenticateParams{\n\t\tImpersonationToken: \"${token}\",\n\t}\n\n\tresp, err := client.Impersonation.Authenticate(context.Background(), params)\n\tif err != nil {\n\t\tlog.Fatalf(\"error in method call: %v\", err)\n\t}\n\n\tlog.Println(resp)\n}\n"
- lang: java
label: Java
source: "// POST /v1/impersonation/authenticate\npackage com.example;\n\nimport com.stytch.java.common.StytchResult;\nimport com.stytch.java.consumer.models.impersonation.AuthenticateRequest;\nimport com.stytch.java.consumer.StytchClient;\n\npublic class Main {\n public static void main(String[] args) {\n StytchClient.configure(\"${projectId}\", \"${secret}\");\n\n AuthenticateRequest params = new AuthenticateRequest();\n params.setImpersonationToken(\"${token}\");\n\n Object result = StytchClient.getImpersonation().authenticate(params);\n if (result instanceof StytchResult.Success) {\n System.out.println(((StytchResult.Success) result).getValue());\n } else {\n System.out.println(((StytchResult.Error) result).getException());\n }\n }\n}"
- lang: kotlin
label: Kotlin
source: "// POST /v1/impersonation/authenticate\npackage com.example\n\nimport com.stytch.java.consumer.StytchClient\nimport com.stytch.java.consumer.models.impersonation.AuthenticateRequest\n\nfun main() {\n StytchClient.configure(\n projectId = \"${projectId}\",\n secret = \"${secret}\",\n )\n\n when (\n val result =\n StytchClient.impersonation.authenticate(\n AuthenticateRequest(\n impersonationToken = \"${token}\",\n ),\n )\n ) {\n is StytchResult.Success -> println(result.value)\n is StytchResult.Error -> println(result.exception)\n }\n}\n"
- lang: javascript
label: Node.js
source: "// POST /v1/impersonation/authenticate\nconst stytch = require('stytch');\n\nconst client = new stytch.Client({\n project_id: '${projectId}',\n secret: '${secret}',\n});\n\nconst params = {\n impersonation_token: \"${token}\",\n};\n\nclient.impersonation.authenticate(params)\n .then(resp => { console.log(resp) })\n .catch(err => { console.log(err) });"
- lang: php
label: PHP
source: "$response = $client->impersonation->authenticate([\n 'impersonation_token' => '${token}',\n]);"
- lang: python
label: Python
source: "# POST /v1/impersonation/authenticate\nfrom stytch import Client\n\nclient = Client(\n project_id=\"${projectId}\",\n secret=\"${secret}\",\n)\n\nresp = client.impersonation.authenticate(\n impersonation_token=\"${token}\",\n)\n\nprint(resp)\n"
- lang: ruby
label: Ruby
source: "# POST /v1/impersonation/authenticate\nrequire 'stytch'\n\nclient = Stytch::Client.new(\n project_id: \"${projectId}\",\n secret: \"${secret}\"\n)\n\nresp = client.impersonation.authenticate(\n impersonation_token: \"${token}\"\n \n)\n\nputs resp"
- lang: rust
label: Rust
source: "// POST /v1/impersonation/authenticate\nuse stytch::consumer::client::Client;\nuse stytch::consumer::impersonation::AuthenticateRequest;\n\nfn main() {\n let client = Client::new(\"${projectId}\", \"${secret}\").unwrap();\n let resp = client.impersonation.authenticate(\n AuthenticateRequest{\n impersonation_token: \"${token}\",\n ..Default::default()\n }\n ).await;\n println!(\"The response is {:?}\", resp);\n}"
- lang: bash
label: cURL
source: "# POST /v1/impersonation/authenticate\ncurl --request POST \\\n --url https://test.stytch.com/v1/impersonation/authenticate \\\n -u '${projectId}:${secret}' \\\n -H 'Content-Type: application/json' \\\n -d '{\n \"impersonation_token\": \"${token}\"\n }'"
components:
schemas:
api_session_v1_SlackOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_session_v1_HubspotOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_session_v1_TwitchOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_EmbeddableMagicLinkFactor:
type: object
properties:
embedded_id:
type: string
required:
- embedded_id
api_impersonation_v1_AuthenticateResponse:
type: object
properties:
request_id:
type: string
description: Globally unique UUID that is returned with every API call. This value is important to log for debugging purposes; we may ask for this value to help identify a specific API call when helping you debug an issue.
user_id:
type: string
description: The unique ID of the affected User.
user:
$ref: '#/components/schemas/api_user_v1_User'
description: The `user` object affected by this API call. See the [Get user endpoint](https://stytch.com/docs/api/get-user) for complete response field details.
session_token:
type: string
description: A secret token for a given Stytch Session.
session_jwt:
type: string
description: The JSON Web Token (JWT) for a given Stytch Session.
status_code:
type: integer
format: int32
description: The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
session:
$ref: '#/components/schemas/api_session_v1_Session'
description: "If you initiate a Session, by including `session_duration_minutes` in your authenticate call, you'll receive a full Session object in the response.\n\n See [Session object](https://stytch.com/docs/api/session-object) for complete response fields.\n "
required:
- request_id
- user_id
- user
- session_token
- session_jwt
- status_code
api_session_v1_EmailFactor:
type: object
properties:
email_id:
type: string
description: The globally unique UUID of the Member's email.
email_address:
type: string
description: The email address of the Member.
required:
- email_id
- email_address
api_session_v1_SteamOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_user_v1_BiometricRegistration:
type: object
properties:
biometric_registration_id:
type: string
description: The unique ID for a biometric registration.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- biometric_registration_id
- verified
api_session_v1_BitbucketOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_OAuthAccessTokenExchangeFactor:
type: object
properties:
client_id:
type: string
description: The ID of the Connected App client.
required:
- client_id
api_impersonation_v1_AuthenticateRequest:
type: object
properties:
impersonation_token:
type: string
description: The User Impersonation token to authenticate. Expires in 5 minutes by default.
description: Request type
required:
- impersonation_token
api_session_v1_DiscordOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_TrustedAuthTokenFactor:
type: object
properties:
token_id:
type: string
description: The ID of the trusted auth token.
required:
- token_id
api_session_v1_AppleOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_ShopifyOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SalesforceOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_AmazonOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_attribute_v1_Attributes:
type: object
properties:
ip_address:
type: string
description: The IP address of the user.
user_agent:
type: string
description: The user agent of the User.
api_session_v1_YahooOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_TwitterOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_AuthenticationFactorDeliveryMethod:
type: string
enum:
- email
- sms
- whatsapp
- embedded
- oauth_google
- oauth_microsoft
- oauth_apple
- webauthn_registration
- authenticator_app
- oauth_github
- recovery_code
- oauth_facebook
- crypto_wallet
- oauth_amazon
- oauth_bitbucket
- oauth_coinbase
- oauth_discord
- oauth_figma
- oauth_gitlab
- oauth_instagram
- oauth_linkedin
- oauth_shopify
- oauth_slack
- oauth_snapchat
- oauth_spotify
- oauth_steam
- oauth_tiktok
- oauth_twitch
- oauth_twitter
- knowledge
- biometric
- sso_saml
- sso_oidc
- oauth_salesforce
- oauth_yahoo
- oauth_hubspot
- imported_auth0
- oauth_exchange_slack
- oauth_exchange_hubspot
- oauth_exchange_github
- oauth_exchange_google
- impersonation
- oauth_access_token_exchange
- trusted_token_exchange
api_session_v1_AuthenticationFactorType:
type: string
enum:
- magic_link
- otp
- oauth
- webauthn
- totp
- crypto
- password
- signature_challenge
- sso
- imported
- recovery_codes
- email_otp
- impersonated
- trusted_auth_token
api_user_v1_TOTP:
type: object
properties:
totp_id:
type: string
description: The unique ID for a TOTP instance.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- totp_id
- verified
api_session_v1_GoogleOAuthFactor:
type: object
properties:
id:
type: string
description: The unique ID of an OAuth registration.
provider_subject:
type: string
description: The unique identifier for the User within a given OAuth provider. Also commonly called the `sub` or "Subject field" in OAuth protocols.
email_id:
type: string
description: The globally unique UUID of the Member's email.
required:
- id
- provider_subject
api_user_v1_Name:
type: object
properties:
first_name:
type: string
description: The first name of the user.
middle_name:
type: string
description: The middle name(s) of the user.
last_name:
type: string
description: The last name of the user.
api_user_v1_PhoneNumber:
type: object
properties:
phone_id:
type: string
description: The unique ID for the phone number.
phone_number:
type: string
description: The phone number.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- phone_id
- phone_number
- verified
api_session_v1_SpotifyOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_user_v1_CryptoWallet:
type: object
properties:
crypto_wallet_id:
type: string
description: The unique ID for a crypto wallet
crypto_wallet_address:
type: string
description: The actual blockchain address of the User's crypto wallet.
crypto_wallet_type:
type: string
description: The blockchain that the User's crypto wallet operates on, e.g. Ethereum, Solana, etc.
verified:
type: boolean
description: The verified boolean denotes whether or not this send method, e.g. phone number, email address, etc., has been successfully authenticated by the User.
required:
- crypto_wallet_id
- crypto_wallet_address
- crypto_wallet_type
- verified
api_user_v1_User:
type: object
properties:
user_id:
type: string
description: The unique ID of the affected User.
emails:
type: array
items:
$ref: '#/components/schemas/api_user_v1_Email'
description: An array of email objects for the User.
status:
type: string
description: The status of the User. The possible values are `pending` and `active`.
phone_numbers:
type: array
items:
$ref: '#/components/schemas/api_user_v1_PhoneNumber'
description: An array of phone number objects linked to the User.
webauthn_registrations:
type: array
items:
$ref: '#/components/schemas/api_user_v1_WebAuthnRegistration'
description: An array that contains a list of all Passkey or WebAuthn registrations for a given User in the Stytch API.
providers:
type: array
items:
$ref: '#/components/schemas/api_user_v1_OAuthProvider'
description: An array of OAuth `provider` objects linked to the User.
totps:
type: array
items:
$ref: '#/components/schemas/api_user_v1_TOTP'
description: An array containing a list of all TOTP instances for a given User in the Stytch API.
crypto_wallets:
type: array
items:
$ref: '#/components/schemas/api_user_v1_CryptoWallet'
description: An array contains a list of all crypto wallets for a given User in the Stytch API.
biometric_registrations:
type: array
items:
$ref: '#/components/schemas/api_user_v1_BiometricRegistration'
description: An array that contains a list of all biometric registrations for a given User in the Stytch API.
is_locked:
type: boolean
description: Whether the User is temporarily locked due to too many failed authentication attempts. See the [User Locking Guide](https://stytch.com/docs/resources/platform/user-locks) for more information.
roles:
type: array
items:
type: string
description: "Roles assigned to this User.\n See the [RBAC guide](https://stytch.com/docs/guides/rbac/role-assignment) for more information about role assignment."
name:
$ref: '#/components/schemas/api_user_v1_Name'
description: The name of the User. Each field in the `name` object is optional.
created_at:
type: string
description: The timestamp of the User's creation. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
password:
$ref: '#/components/schemas/api_user_v1_Password'
description: The password object is returned for users with a password.
trusted_metadata:
type: object
additionalProperties: true
description: The `trusted_metadata` field contains an arbitrary JSON object of application-specific data. See the [Metadata](https://stytch.com/docs/api/metadata) reference for complete field behavior details.
untrusted_metadata:
type: object
additionalProperties: true
description: The `untrusted_metadata` field contains an arbitrary JSON object of application-specific data. Untrusted metadata can be edited by end users directly via the SDK, and **cannot be used to store critical information.** See the [Metadata](https://stytch.com/docs/api/metadata) reference for complete field behavior details.
external_id:
type: string
description: An identifier that can be used in most API calls where a `member_id` is expected. This is a string consisting of alphanumeric, `.`, `_`, `-`, or `|` characters with a maximum length of 128 characters. External IDs must be unique within the project.
lock_created_at:
type: string
description: When the user lock was created, if there is one. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
lock_expires_at:
type: string
description: When the user lock expires, if there is one. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
required:
- user_id
- emails
- status
- phone_numbers
- webauthn_registrations
- providers
- totps
- crypto_wallets
- biometric_registrations
- is_locked
- roles
api_session_v1_GitLabOAuthFactor:
type: object
properties:
id:
type: string
provider_subject:
type: string
email_id:
type: string
required:
- id
- provider_subject
api_session_v1_SAMLSSOFactor:
type: object
properties:
id:
type: string
description: The unique ID of an SSO Registration.
provider_id:
type: string
description: Globally unique UUID that identifies a specific SAML Connection.
external_id:
type: string
description: The ID of the member given by the identity provider.
required:
- id
- provider_id
- external_id
api_user_v1_Password:
type: object
properties:
password_id:
type: string
description: The unique ID of a specific password
requires_reset:
type: boolean
description: Indicates whether this password requires a password reset
required:
- password_id
- requires_reset
api_session_v1_CryptoWalletFactor:
type: object
properties:
crypto_wallet_id:
type: string
crypto_wallet_address:
type: string
crypto_wallet_type:
type: string
required:
- crypto_wallet_id
- crypto_wallet_address
- crypto_wallet_type
api_session_v1_Session:
type: object
properties:
session_id:
type: string
description: A unique identifier for a specific Session.
user_id:
type: string
description: The unique ID of the affected User.
authentication_factors:
type: array
items:
$ref: '#/components/schemas/api_session_v1_AuthenticationFactor'
description: An array of different authentication factors that comprise a Session.
roles:
type: array
items:
type: string
started_at:
type: string
description: The timestamp when the Session was created. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
last_accessed_at:
type: string
description: The timestamp when the Session was last accessed. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
expires_at:
type: string
description: The timestamp when the Session expires. Values conform to the RFC 3339 standard and are expressed in UTC, e.g. `2021-12-29T12:33:09Z`.
attributes:
$ref: '#/components/schemas/api_attribute_v1_Attributes'
description: Provided attributes help with fraud detection.
custom_claims:
type: object
additionalProperties: true
description: The custom claims map for a Session. Claims can be added to a session during a Sessions authenticate call.
required:
- session_id
- user_id
- authentication_factors
- roles
api_session_v1_AuthenticationFactor:
type: object
properties:
type:
$ref: '#/components/schemas/api_session_v1_AuthenticationFactorType'
description: "The type of authentication factor. The possible values are: `email_otp`, `impersonated`, `imported`,\n `magic_link`, `oauth`, `otp`, `password`, `recovery_codes`, `sso`, `trusted_auth_token`, or `totp`."
delivery_method:
$ref: '#/components/schemas/api_session_v1_AuthenticationFactorDeliveryMethod'
description: "The method that was used to deliver the authentication factor. The possible values depend on the `type`:\n \n `email_otp` – Only `email`.\n \n `impersonated` – Only `impersonation`.\n \n `imported` – Only `imported_auth0`.\n \n `magic_link` – Only `email`.\n \n `oauth` – The delivery method is determined by the specific OAuth provider used. The possible values are `oauth_google`, `oauth_microsoft`, `oauth_hubspot`, `oauth_slack`, or `oauth_github`.\n \n In addition, you may see an 'exchange' delivery method when a non-email-verifying OAuth factor originally authenticated in one organization is exchanged for a factor in another organization.\n This can happen during authentication flows such as [session exchange](https://stytch.com/docs/b2b/api/exchange-session).\n The non-email-verifying OAuth providers are Hubspot, Slack, and Github.\n Google is also considered non-email-verifying when the HD claim is empty.\n The possible exchange values are `oauth_exchange_google`, `oauth_exchange_hubspot`, `oauth_exchange_slack`, or `oauth_exchange_github`.\n \n The final possible value is `oauth_access_token_exchange`, if this factor came from an [access token exchange flow](https://stytch.com/docs/b2b/api/connected-app-access-token-exchange).\n \n `otp` – Only `sms`.\n \n `password` – Only `knowledge`.\n \n `recovery_codes` – Only `recovery_code`.\n \n `sso` – Either `sso_saml` or `sso_oidc`.\n \n `trusted_auth_token` – Only `trusted_token_exchange`.\n \n `totp` – Only `authenticator_app`.\n "
last_authenticated_at:
type: string
description: The timestamp when the factor was last authenticated.
created_at:
type: string
description: The timestamp when the factor was initially authenticated.
updated_at:
type: string
description: The timestamp when the factor was last updated.
email_factor:
$ref: '#/components/schemas/api_session_v1_EmailFactor'
description: Information about the email factor, if one is present.
phone_number_factor:
$ref: '#/components/schemas/api_session_v1_PhoneNumberFactor'
description: Information about the phone number factor, if one is present.
google_oauth_factor:
$ref: '#/components/schemas/api_session_v1_GoogleOAuthFactor'
description: Information about the Google OAuth factor, if one is present.
microsoft_oauth_factor:
$ref: '#/components/schemas/api_session_v1_MicrosoftOAuthFactor'
description: Information about the Microsoft OAuth factor, if one is present.
apple_oauth_factor:
$ref: '#/components/schemas/api_session_v1_AppleOAuthFactor'
webauthn_factor:
$ref: '#/components/schemas/api_session_v1_WebAuthnFactor'
authenticator_app_factor:
$ref: '#/components/schemas/api_session_v1_AuthenticatorAppFactor'
description: Information about the TOTP-backed Authenticator App factor, if one is present.
github_oauth_factor:
$ref: '#/components/schemas/api_session_v1_GithubOAuthFactor'
description: Information about the Github OAuth factor, if one is present.
recovery_code_factor:
$ref: '#/components/schemas/api_session_v1_RecoveryCodeFactor'
facebook_oauth_factor:
$ref: '#/components/schemas/api_session_v1_FacebookOAuthFactor'
crypto_wallet_factor:
$ref: '#/components/schemas/api_session_v1_CryptoWalletFactor'
amazon_oauth_factor:
$ref: '#/components/schemas/api_session_v1_AmazonOAuthFactor'
bitbucket_oauth_factor:
$ref: '#/components/schemas/api_session_v1_BitbucketOAuthFactor'
coinbase_oauth_factor:
$ref: '#/components/schemas/api_session_v1_CoinbaseOAuthFactor'
discord_oauth_factor:
$ref: '#/components/schemas/api_session_v1_DiscordOAuthFactor'
figma_oauth_factor:
$ref: '#/components/schemas/api_session_v1_FigmaOAuthFactor'
git_lab_oauth_factor:
$ref: '#/components/schemas/api_session_v1_GitLabOAuthFactor'
instagram_oauth_factor:
$ref: '#/components/schemas/api_session_v1_InstagramOAuthFactor'
linked_in_oauth_factor:
$ref: '#/components/schemas/api_session_v1_LinkedInOAuthFactor'
shopify_oauth_factor:
$ref: '#/components/schemas/api_session_v1_ShopifyOAuthFactor'
slack_oauth_factor:
$ref: '#/components/schemas/api_session_v1_SlackOAuthFactor'
description: Information about the Slack OAuth factor, if one is present.
snapchat_oauth_factor:
$ref: '#/components/schemas/api_session_v1_SnapchatOAuthFactor'
spotify_oauth_factor:
$ref: '#/components/schemas/api_session_
# --- truncated at 32 KB (43 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/stytch/refs/heads/main/openapi/stytch-impersonation-api-openapi.yml