Authentication APIs
The authentication APIs return information about the authenticated user, the permissions granted to that user, and the TLS connection used to make the request.
OpenSearch supports the following authentication APIs.
| API | Description |
|---|---|
| Authentication Information API | Returns the name, roles, backend roles, custom attributes, and tenant memberships of the currently authenticated user. |
| Who Am I API | Returns the identity information of the currently authenticated user. |
| Who Am I Protected API | Returns the identity information of the currently authenticated user and enforces REST layer authorization. |
| Permissions Info API | Returns the evaluated REST API permissions of the currently authenticated user. |
| SSL Info API | Returns information about the TLS connection and the certificates used for the request. |
| Authorization Token API | Returns an OK status with an empty message. This endpoint does not issue a token. |
| Generate On-Behalf-Of Token API | Generates an On-Behalf-Of token that allows a service to act for the currently authenticated user. |