Validate user credentials without creating a session

post

http://127.0.0.1:8080/authentication/password/validation

Validates user credentials against local, RADIUS, or TACACS+ authentication without creating an authenticated session. Use this endpoint to verify credentials before performing sensitive operations. Failed attempts are tracked and may result in temporary account lockout. No authentication required.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

User credentials to validate. Supports local, RADIUS, or TACACS+ authentication.

Request body for password validation without session creation. Validates credentials against local, RADIUS, or TACACS+ authentication.

user

string

required

length ≥ 1

Username or user ID for authentication. Must be a valid user account.

password

string

required

length ≥ 1

User password. Can be plain text or AES-GCM encrypted if isEncrypted is true.

loginType

integer

enum

Defaults to 0

Authentication protocol to use: 0=Local, 1=RADIUS, 2=TACACS+.

Allowed:

isEncrypted

boolean

Defaults to false

Set to true if password is AES-GCM encrypted. When true, randomizer field is required.

randomizer

string

Base64-encoded initialization vector (IV) for AES-GCM password decryption. Obtain from /authentication/orchestratorRandomizer. Required only when isEncrypted is true.

Responses

200

Password validation successful. No response body is returned.

Language

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

text/html

401Authentication failed due to invalid credentials or account lockout.