Table of Contents

Namespace KadicAuth.Api.Controllers

Classes

AuthController
HealthController
ModulesController
PermissionsController
PlansController
PlatformAdminsController

Platform-admin membership administration. Deliberately isolated:

  • Not exposed in Swagger ([ApiExplorerSettings(IgnoreApi = true)]).
  • Every endpoint gated by RequirePlatformAdminAttribute which returns 404 to unauthorized callers (so they cannot even learn this controller exists).
  • Does not use the normal Permissions.Auth.* policy system. Platform admins are a parallel, first-class concept — on purpose.
  • Grants and revokes are audited inside IPlatformAdminService.

Bootstrap of the very first platform admin happens via PlatformAdminBootstrap at startup; this controller cannot bootstrap because it requires an existing platform admin to call it.

RolesController
SubModulesController
TenantBranchesController
TenantModulesController
TenantSubModulesController
TenantsController
UsersController