Docs

auth.attempt.created

An authentication attempt started.

The body is the event as GET /events returns it.

Request Body

application/json
  1. body

Wide event with event_type=auth.attempt.created.

id*string

Managed event id (evt_<opaque>).

project_id*project-id
Match^[a-zA-Z0-9_-]+$
team_id?|

Emit-time team scope, when the actor operated under a team.

event_type*string

Semantic event name (dot-separated). Discriminator for the Event union — see docs/design/api/events-catalog.md.

category*string

Wide-event category.

Value in"request""auth""session""admin""entity""signal"
occurred_at*string

When the action happened (server/storage clock, dialect-owned).

Formatdate-time
created_at*string

When the row was inserted (server/storage clock, dialect-owned).

Formatdate-time
actor_id?|

Who triggered the event.

actor_type?|

Actor kind.

entity_type?|

Resource type affected.

entity_id?|

Resource id affected.

client_id*string

Application or agent that produced the event.

token_id?string

Token id present at emit time, when any.

delegation_type?string

Delegation kind (omit when unset).

Value in"direct""delegated""pat_shared""exchanged"
delegation_id?string
grantor?string
fingerprint?string

Device fingerprint correlation id.

request_id?|

HTTP request correlation id.

session_id?|

Session correlation id.

flow_id?|

Login flow correlation id.

metadata?

Emit-time metadata, already redacted at write. Path A request.api may set client (ip, user_agent, origin) for SIEM join on request_id. Not a live risk-evaluator input.

payload*

Empty payload for event types with no typed fields (e.g. project.deleted, user.deleted, session.expired).

Response Body

Delivered. Any 2xx status acknowledges the event; the response body is ignored.

Example Requests
POST/auth.attempt.created

Wide event with event_type=auth.attempt.created.

Request Bodyapplication/json
{  "id": "string",  "project_id": "string",  "category": "request",  "occurred_at": "2019-08-24T14:15:22Z",  "created_at": "2019-08-24T14:15:22Z",  "client_id": "string",  "event_type": "auth.attempt.created",  "payload": {}}

Was this helpful?