How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Ory frontend API

Endpoints used by frontend applications (e.g. Single-Page-App, Native Apps, Server Apps, ...) to manage a user's own profile.

Ory frontend API is one of 22 APIs that Ory publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Frontend. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and a GitHub repository.

This API exposes 32 operations across 31 paths, and defines 94 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

32 operations 31 paths 94 schemas 3 DELETE23 GET6 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Authentication
HTTP Basic, HTTP Bearer, OAuth 2.0
Contact
License
Apache 2.0
Resource Areas
1

Authentication & Security 3

Ory frontend API declares 3 security schemes for authenticating requests. It accepts HTTP basic authentication (basic). It accepts HTTP bearer tokens (bearer). It supports OAuth 2.0 (oauth2) using the authorizationCode flow, exposing 3 scopes.

Paths & Operations 32

Across 31 paths, the API surfaces 32 operations — 3 DELETE, 23 GET, 6 POST. Each is listed below with its method, path, parameters, and response codes.

frontend 32

Endpoints used by frontend applications (e.g. Single-Page-App, Native Apps, Server Apps, ...) to manage a user's own profile.

GET
/.well-known/ory/webauthn.js
Get WebAuthn JavaScript
getWebAuthnJavaScript → 200
GET
/self-service/errors
Get User-Flow Errors
getFlowError 1 param → 200403404500
GET
/self-service/fed-cm/parameters
Get FedCM Parameters
createFedcmFlow → 200400default
POST
/self-service/fed-cm/token
Submit a FedCM token
updateFedcmFlow body → 200303400410422default
POST
/self-service/login
Submit a Login Flow
updateLoginFlow 3 params body → 200303400410422default
GET
/self-service/login/api
Create Login Flow for Native Apps
createNativeLoginFlow 8 params → 200400default
GET
/self-service/login/browser
Create Login Flow for Browsers
createBrowserLoginFlow 8 params → 200303400default
GET
/self-service/login/flows
Get Login Flow
getLoginFlow 2 params → 200403404410default
GET
/self-service/logout
Update Logout Flow
updateLogoutFlow 3 params → 204303default
DELETE
/self-service/logout/api
Perform Logout for Native Apps
performNativeLogout body → 204400default
GET
/self-service/logout/browser
Create a Logout URL for Browsers
createBrowserLogoutFlow 2 params → 200400401500
POST
/self-service/recovery
Update Recovery Flow
updateRecoveryFlow 3 params body → 200303400410422default
GET
/self-service/recovery/api
Create Recovery Flow for Native Apps
createNativeRecoveryFlow → 200400default
GET
/self-service/recovery/browser
Create Recovery Flow for Browsers
createBrowserRecoveryFlow 2 params → 200303400default
GET
/self-service/recovery/flows
Get Recovery Flow
getRecoveryFlow 2 params → 200404410default
POST
/self-service/registration
Update Registration Flow
updateRegistrationFlow 2 params body → 200303400410422default
GET
/self-service/registration/api
Create Registration Flow for Native Apps
createNativeRegistrationFlow 4 params → 200400default
GET
/self-service/registration/browser
Create Registration Flow for Browsers
createBrowserRegistrationFlow 5 params → 200303default
GET
/self-service/registration/flows
Get Registration Flow
getRegistrationFlow 2 params → 200403404410default
POST
/self-service/settings
Complete Settings Flow
updateSettingsFlow 3 params body → 200303400401403410422default
GET
/self-service/settings/api
Create Settings Flow for Native Apps
createNativeSettingsFlow 1 param → 200400default
GET
/self-service/settings/browser
Create Settings Flow for Browsers
createBrowserSettingsFlow 2 params → 200303400401403default
GET
/self-service/settings/flows
Get Settings Flow
getSettingsFlow 3 params → 200401403404410default
POST
/self-service/verification
Complete Verification Flow
updateVerificationFlow 3 params body → 200303400410default
GET
/self-service/verification/api
Create Verification Flow for Native Apps
createNativeVerificationFlow 1 param → 200400default
GET
/self-service/verification/browser
Create Verification Flow for Browser Clients
createBrowserVerificationFlow 1 param → 200303default
GET
/self-service/verification/flows
Get Verification Flow
getVerificationFlow 2 params → 200403404default
DELETE
/sessions
Disable my other sessions
disableMyOtherSessions 2 params → 200400401default
GET
/sessions
Get My Active Sessions
listMySessions 6 params → 200400401default
GET
/sessions/token-exchange
Exchange Session Token
exchangeSessionToken 2 params → 200403404410422default
GET
/sessions/whoami
Check Who the Current HTTP Session Belongs To
toSession 3 params → 200401403default
DELETE
/sessions/{id}
Disable one of my sessions
disableMySession 3 params → 204400401default

Schemas 94

The contract defines 94 schemas that model the data the API accepts and returns. The most detailed are OAuth2Client (48 properties), loginFlow (19 properties), identity (15 properties), uiNodeInputAttributes (15 properties). Each schema is shown below with its type and property counts.

settingsFlow
object
This flow is used when an identity wants to update settings (e.g. profile data, passwords, ...) in a selfservice manner. We recommend reading the [User Setting…
12 properties 8 required
nullTime
string
updateLoginFlowWithTotpMethod
object
Update Login Flow with TOTP Method
4 properties 2 required
loginFlow
object
This object represents a login flow. A login flow is initiated at the "Initiate Login API / Browser Flow" endpoint by a client. Once a login flow is completed…
19 properties 7 required
uiNodeAttributes
selfServiceFlowType
string
The flow type can either be api or browser.
updateRecoveryFlowWithCodeMethod
object
Update Recovery Flow with Code Method
9 properties 1 required
updateSettingsFlowWithOidcMethod
object
Update Settings Flow with OpenID Connect Method
7 properties 1 required
updateSettingsFlowWithLookupMethod
object
Update Settings Flow with Lookup Method
7 properties 1 required
updateRegistrationFlowWithWebAuthnMethod
object
Update Registration Flow with WebAuthn Method
6 properties 2 required
successfulNativeRegistration
object
The Response for Registration Flows via API
4 properties 1 required
OAuth2LoginRequest
object
OAuth2LoginRequest struct for OAuth2LoginRequest
9 properties
updateRecoveryFlowWithLinkMethod
object
Update Recovery Flow with Link Method
4 properties 2 required
updateSettingsFlowWithWebAuthnMethod
object
Update Settings Flow with WebAuthn Method
6 properties 1 required
errorBrowserLocationChangeRequired
object
2 properties
updateLoginFlowWithPasswordMethod
object
Update Login Flow with Password Method
6 properties 3 required
updateRegistrationFlowWithCodeMethod
object
Update Registration Flow with Code Method
6 properties 2 required
ID
integer
sessionAuthenticationMethod
object
A singular authenticator used during authentication / login.
7 properties
updateSettingsFlowWithPasskeyMethod
object
Update Settings Flow with Passkey Method
4 properties 1 required
sessionAuthenticationMethods
array
A list of authenticators which were used to authenticate the session.
identityCredentials
object
Credentials represents a specific credential type
6 properties
updateLoginFlowWithSamlMethod
object
Update login flow using SAML
4 properties 2 required
updateSettingsFlowWithSamlMethod
object
Update settings flow using SAML
7 properties 1 required
updateLoginFlowWithPasskeyMethod
object
Update Login Flow with Passkey Method
3 properties 1 required
continueWithSettingsUi
object
Indicates, that the UI flow could be continued by showing a settings ui
2 properties 2 required
recoveryIdentityAddress
object
6 properties 2 required
continueWithVerificationUi
object
Indicates, that the UI flow could be continued by showing a verification ui
2 properties 2 required
uiText
object
4 properties 3 required
flowError
object
4 properties 1 required
registrationFlow
object
15 properties 7 required
updateLoginFlowWithOidcMethod
object
Update Login Flow with OpenID Connect Method
8 properties 2 required
updateLoginFlowWithCodeMethod
object
Update Login flow using the code method
7 properties 2 required
uiNodeTextAttributes
object
3 properties 3 required
continueWithRecoveryUi
object
Indicates, that the UI flow could be continued by showing a recovery ui
2 properties 2 required
uiNodeInputAttributes
object
InputAttributes represents the attributes of an input node
15 properties 4 required
uiNodeDivisionAttributes
object
Division sections are used for interactive widgets that require a hook in the DOM / view.
4 properties 2 required
performNativeLogoutBody
object
Perform Native Logout Request Body
1 property 1 required
continueWithSettingsUiFlow
object
2 properties 1 required
updateSettingsFlowBody
Update Settings Flow Request Body
sessionDevice
object
Device corresponding to a Session
4 properties 1 required
updateRegistrationFlowWithPasswordMethod
object
Update Registration Flow with Password Method
5 properties 3 required
uiContainer
object
Container represents a HTML Form. The container can work with both HTTP Form and JSON requests
4 properties 3 required
authenticatorAssuranceLevel
string
The authenticator assurance level can be one of "aal1", "aal2", or "aal3". A higher number means that it is harder for an attacker to compromise the account. G…
updateRegistrationFlowWithProfileMethod
object
Update Registration Flow with Profile Method
5 properties 2 required
session
object
A Session
10 properties 1 required
updateRegistrationFlowWithPasskeyMethod
object
Update Registration Flow with Passkey Method
5 properties 2 required
uiNodeInputAttributesOption
object
Represents a single selectable value for an input whose JSON schema defined an enum. The value is always a scalar JSON type (string, number, or boolean) serial…
1 property 1 required
updateLoginFlowWithIdentifierFirstMethod
object
Update Login Flow with Multi-Step Method
4 properties 2 required
updateLoginFlowWithLookupSecretMethod
object
Update Login Flow with Lookup Secret Method
3 properties 2 required
identity
object
An [identity](https://www.ory.com/docs/kratos/concepts/identity-user-model) represents a (human) user in Ory.
15 properties 4 required
updateVerificationFlowBody
Update Verification Flow Request Body
uiTexts
array
nullJsonRawMessage
NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-
createFedcmFlowResponse
object
Contains a list of all available FedCM providers.
2 properties
continueWithRecoveryUiFlow
object
2 properties 1 required
updateRecoveryFlowBody
Update Recovery Flow Request Body
verificationFlow
object
Used to verify an out-of-band communication channel such as an email address or a phone number. For more information head over to: https://www.ory.com/docs/kra…
10 properties 4 required
OAuth2Client
object
48 properties
continueWith
object
deleteMySessionsCount
object
Deleted Session Count
1 property
logoutFlow
object
Logout Flow
2 properties 2 required
NullUUID
stringnull
updateRegistrationFlowWithSamlMethod
object
Update registration flow using SAML
5 properties 2 required
continueWithSetOrySessionToken
object
Indicates that a session was issued, and the application should use this token for authenticated requests
2 properties 2 required
Provider
object
7 properties
updateVerificationFlowWithCodeMethod
object
5 properties 1 required
updateLoginFlowBody
updateRegistrationFlowBody
Update Registration Request Body
updateSettingsFlowWithProfileMethod
object
Update Settings Flow with Profile Method
4 properties 2 required
successfulNativeLogin
object
The Response for Login Flows via API
3 properties 1 required
uiNodeAnchorAttributes
object
4 properties 4 required
errorGeneric
object
The standard Ory JSON API error format.
1 property 1 required
JSONRawMessage
object
continueWithRedirectBrowserTo
object
Indicates, that the UI flow could be continued by showing a recovery ui
2 properties 2 required
UpdateFedcmFlowBody
object
4 properties 2 required
recoveryFlow
object
This request is used when an identity wants to recover their account. We recommend reading the [Account Recovery Documentation](../self-service/flows/password-…
11 properties 7 required
uiNodeMeta
object
This might include a label and other information that can optionally be used to render UIs.
1 property
identityVerifiableAddressStatus
string
VerifiableAddressStatus must not exceed 16 characters as that is the limitation in the SQL Schema
uiNodeScriptAttributes
object
9 properties 9 required
uiNodes
array
updateLoginFlowWithWebAuthnMethod
object
Update Login Flow with WebAuthn Method
5 properties 2 required
updateRegistrationFlowWithOidcMethod
object
Update Registration Flow with OpenID Connect Method
8 properties 2 required
webAuthnJavaScript
string
continueWithVerificationUiFlow
object
3 properties 2 required
OAuth2ConsentRequestOpenIDConnectContext
object
OAuth2ConsentRequestOpenIDConnectContext struct for OAuth2ConsentRequestOpenIDConnectContext
5 properties
uiNode
object
Nodes are represented as HTML elements or their native UI equivalents. For example, a node can be an tag, or an but also some plain text.
5 properties 5 required
uiNodeImageAttributes
object
5 properties 5 required
verifiableIdentityAddress
object
VerifiableAddress is an identity's verifiable address
8 properties 4 required
identityTraits
Traits represent an identity's traits. The identity is able to create, modify, and delete traits in a self-service manner. The input will always be validated a…
updateSettingsFlowWithPasswordMethod
object
Update Settings Flow with Password Method
4 properties 2 required
updateVerificationFlowWithLinkMethod
object
Update Verification Flow with Link Method
4 properties 2 required
updateSettingsFlowWithTotpMethod
object
Update Settings Flow with TOTP Method
5 properties 1 required
genericError
object
8 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

ory-frontend-api-openapi.yml Raw ↑

Other APIs Ory publishes across the network.

Ory api API
Ory courier API
Ory identity API
Ory jwk API
Ory metadata API
Ory oAuth2 API
Ory oidc API
Ory permission API
Ory relationship API
Ory wellknown API
Ory Billing API
Ory Event Streams API
Where this information came from

This is an independent, third-party profile of Ory frontend API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.