POST /api/admin/admins

Developing

POST

/api/admin/admins

POST /api/admin/admins (admins.create, step-up):
{mode:"invite", email, name, role, linkedCustomerSub?} new staff login; Cognito emails a temporary password
{mode:"promote", email, role, name?} link exactly one customer with that verified email
201 {admin, emailed}. Audited in admins.ts (admin.invite / admin.promote).

Staff cookie session; permission admins.create; fresh password + TOTP step-up (10 minutes). Write requests need same-origin JSON and X-Admin-CSRF from this session.

Source snapshot: admin/src/app/api/admin/admins/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.

Request

Authorization

API Key

Add parameter in cookie

__Host-hwa_session

Example:

__Host-hwa_session: ********************

Header Params

Body Params application/jsonRequired

Examples

Responses

🟢201

application/json

Bodyapplication/json

🟠400

🟠401

🟠403

🟠429

⚪default

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/admin/admins' \
--header 'X-Admin-CSRF;' \
--header 'Content-Type: application/json' \
--data-raw '{
    "mode": "invite",
    "email": "user@example.com",
    "name": "string",
    "role": "owner",
    "linkedCustomerSub": "string"
}'

Response Example

201 - Example 1

{}

Modified at 2026-10-26 13:41:16

GET /api/admin/admins

README — GET /api/admin/alarms