How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Rokwire Core Building Block API

The identity, account and authorization service at the centre of UIUC's Rokwire platform — accounts, profiles, applications, organizations, service registrations, permissions, roles and scopes. Written and operated by the university, deployed at api.rokwire.illinois.edu/core, and published as Apache-2.0 source in github.com/rokwire/core-building-block. Version 1.62.0, 105 paths / 151 operations, bearer JWT throughout, with a minimal OIDC discovery document and a live JWKS. The repo holds the pristine specification in openapi/_original/ plus nine tag-refined slices.

Rokwire Core Building Block API is one of 8 APIs that University of Illinois Urbana-Champaign publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Identity, Authentication, Authorization, Account, and Rokwire. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

This API exposes 44 operations across 35 paths, and defines 74 schemas. It is described by OpenAPI 3.2.0, at version 1.62.0.

Requests are made against a single base URL, https://api.rokwire.illinois.edu/core.

44 operations 35 paths 74 schemas 4 DELETE13 GET22 POST5 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.62.0
Base URL
https://api.rokwire.illinois.edu/core
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Rokwire Core Building Block API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth).

Paths & Operations 44

Across 35 paths, the API surfaces 44 operations — 4 DELETE, 13 GET, 22 POST, 5 PUT. Each is listed below with its method, path, parameters, and response codes.

Services 44

Clients applications APIs.

POST
/services/auth/login
Login
body → 200400401500
POST
/services/auth/mfa
MFA
1 param body → 200400401500
POST
/services/auth/refresh
Refresh
body → 200400401500
POST
/services/auth/login-url
Get SSO login url
body → 200400401500
POST
/services/auth/logout
Logout
body → 200400401500
GET
/services/auth/credential/verify
Validate verification code
2 params → 200400401500
POST
/services/auth/credential/send-verify
Send verification code to identifier
body → 200400401500
POST
/services/auth/credential/forgot/initiate
Initiate reset credential for a given identifier
body → 200400401500
POST
/services/auth/credential/forgot/complete
Complete resetting forgotten credential
body → 200400401500
POST
/services/auth/credential/update
Reset a credential from client application
body → 200400401500
POST
/services/auth/verify-mfa
MFA
body → 200400401500
POST
/services/auth/account/exists
Check if an account already exists
body → 200400401500
POST
/services/auth/account/can-sign-in
Check if a client can sign in
body → 200400401500
POST
/services/auth/account/can-link
Check if a client can link an auth type
body → 200400401500
POST
/services/auth/account/auth-type/link
Link credentials
body → 200400401500
DELETE
/services/auth/account/auth-type/link
Unlink credentials
body → 200400401500
POST
/services/auth/authorize-service
Authorize service
body → 200400401500
GET
/services/auth/service-regs
Get service registrations
1 param → 200400401500
GET
/services/accounts
Finds accounts
11 params → 200400401500
POST
/services/accounts
Create admin account
body → 200400401500
PUT
/services/accounts
Update admin account
body → 200400401500
GET
/services/accounts/public
Finds public accounts
10 params → 200400401500
GET
/services/v2/accounts/public
Finds public accounts
11 params → 200400401500
DELETE
/services/account
Delete account
1 param body → 200400401500
GET
/services/account
Get account
→ 200400401500
GET
/services/account/mfa
Get account MFA types
→ 200400401500
POST
/services/account/mfa
Enroll in MFA type
body → 200400401500
DELETE
/services/account/mfa
Remove MFA type
body → 200400401500
PUT
/services/account/preferences
Update account preferences
body → 200400401500
GET
/services/account/preferences
Get preferences
→ 200400401500
GET
/services/account/profile
Get user profile
→ 200400401500
PUT
/services/account/profile
Update user profile
body → 200400401500
GET
/services/account/privacy
Get user privacy settings
→ 200400401500
PUT
/services/account/privacy
Update user privacy
body → 200400401500
GET
/services/account/system-configs
Get system configs
→ 200400401500
PUT
/services/account/username
Update account username
body → 200400401500
POST
/services/account/follow
Add follower
body → 200400401500
DELETE
/services/account/follow/{id}
Delete a follow relationship
1 param → 200400401500
GET
/services/test
Test API..
→ 200
POST
/services/app-configs
Gets default app config
body → 200400401404500
POST
/services/app-configs/organization
Gets organization-specific app configs
body → 200400401404500
POST
/services/application/configsdeprecated
Gets default app config
body → 200400401404500
POST
/services/application/organization/configsdeprecated
Gets organization-specific app configs
body → 200400401404500
GET
/services/user-data
Get user data
→ 200400401500

Schemas 74

The contract defines 74 schemas that model the data the API accepts and returns. The most detailed are Account (21 properties), PartialAccount (21 properties), Profile (18 properties), LoginSession (18 properties). Each schema is shown below with its type and property counts.

_shared_req_app-configs
object
3 properties 3 required
_services_req_authorize-service
object
2 properties 1 required
Follow
object
3 properties 3 required
_shared_req_ParamsSetEmailCredential
object
2 properties 2 required
PrivacyNullable
objectnull
2 properties
PubKey
object
2 properties 2 required
_shared_req_CredsEmail
object
Auth login creds for authtype="email"
2 properties 2 required
_shared_req_Login
object
11 properties 5 required
_shared_req_ParamsNone
objectnull
Auth login request params for unlisted authtypes (None)
ApplicationOrganization
objectnull
7 properties 3 required
Account
object
21 properties 1 required
AccountAuthType
object
6 properties 3 required
_services_req_credential_forgot_complete
object
3 properties 2 required
_services_res_account_auth-type-link
object
2 properties 1 required
Application
object
6 properties 5 required
Device
object
4 properties 2 required
_services_req_account_auth-type-link
object
4 properties 3 required
_shared_req_CredsUsername
object
Auth login creds for authtype="username"
2 properties 2 required
PublicAccountIdentifier
object
2 properties 2 required
Privacy
object
2 properties
SupportedAuthTypes
object
2 properties
LoginSessionSettings
object
5 properties
_shared_req_CreateAccount
object
9 properties 2 required
ApplicationType
object
4 properties 2 required
_shared_req_CredsTwilioPhone
object
Auth login creds for authtype="twiliophone"
2 properties 1 required
PublicAccount
object
6 properties 4 required
_shared_req_CredsAPIKey
object
Auth login creds for authtype="anonymous"
1 property
ServiceReg
object
Full service registration record
10 properties 5 required
PartialAccount
object
21 properties 11 required
_shared_res_ParamsNone
objectnull
Auth login response params for unlisted authtypes (None)
_shared_req_LoginUrl
object
5 properties 5 required
_services_res_accounts-public
object
3 properties 3 required
_shared_res_AccountCheck
boolean
_services_res_authorize-service
object
4 properties
_services_req_credential_forgot_initiate
object
5 properties 5 required
_shared_req_Refresh
object
2 properties 2 required
_shared_res_Login_Mfa
object
5 properties 4 required
_shared_req_CredsOIDC
string
Auth login creds for authtype="oidc" (or variants) - full redirect URI received from OIDC provider
_shared_req_ParamsOIDC
object
Auth login params for authtype="oidc" (or variants)
2 properties
_shared_req_DeleteAccount
object
2 properties 1 required
_shared_res_Login
object
4 properties
_shared_req_ParamsUsername
object
Auth login params for authtype="username"
2 properties
RefreshGracePeriodPolicy
object
2 properties 2 required
Profile
object
18 properties 1 required
AppOrgRole
object
9 properties 2 required
_shared_res_Refresh
object
2 properties
SupportedAuthType
object
2 properties
InactiveExpirePolicy
object
2 properties 2 required
_shared_req_Mfa
object
3 properties 2 required
_shared_res_RokwireToken
object
3 properties
_shared_req_app-configs-org
object
2 properties 2 required
TSLExpirePolicy
object
2 properties 2 required
YearlyExpirePolicy
object
5 properties 5 required
_shared_res_ParamsOIDC
object
Auth login response params for authtype="oidc" (or variants)
2 properties
_services_req_account_auth-type-unlink
object
3 properties 3 required
PartialApp
object
3 properties 3 required
_services_req_credential_update
object
2 properties 1 required
_shared_req_ParamsEmail
object
Auth login params for authtype="email"
2 properties
ServiceScope
object
3 properties 2 required
ProfileNullable
objectnull
17 properties
AppOrgGroup
object
9 properties 2 required
_shared_res_Mfa
object
3 properties
LoginSession
object
18 properties
_services_req_credential_send-verify
object
5 properties 5 required
_shared_res_ParamsAPIKey
object
Auth login response params for authtype="anonymous"
1 property
_shared_req_Login_Mfa
object
7 properties 7 required
UserData
object
2 properties
IdentityProviderSettings
object
17 properties 2 required
_shared_req_UpdateAccount
object
6 properties 2 required
ApplicationConfig
object
5 properties 4 required
_shared_req_AccountCheck
object
5 properties 5 required
Username
object
1 property 1 required
Permission
object
7 properties 2 required
_shared_res_LoginUrl
object
2 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

university-of-illinois-urbana-champaign-services-api-openapi.yml Raw ↑

Other APIs University of Illinois Urbana-Champaign publishes across the network.

Rokwire Gateway Building Block API
Course Explorer (CISAPI)
IDEALS OAI-PMH
Illinois Data Bank Dataset Metadata
Illinois Shibboleth Identity Provider (InCommon)
Illinois Experts (Elsevier Pure)
University Library Discovery (Ex Libris Primo)
Where this information came from

This is an independent, third-party profile of Rokwire Core Building Block API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.