Claim initial Administrator access for the current human account
POST/api/v1/setup/claim
Requires an unclaimed installation, an ordinary same-origin cookie session for an active USER principal, and proof of the protected owner recovery credential. The required expectedPrincipalId must be the canonical principal identifier from the caller's confirmed session; a different cookie principal returns installation_setup_session_changed before consuming setup or granting a role. Missing, null, or malformed claimant identifiers return 400. The transaction permanently closes setup claiming, binds the built-in Administrator role, and appends a safe audit event. The recovery Owner remains separate.
Request
Responses
- 200
- 400
- 401
- 403
- 409
- 421
- 503
Setup claimed and current capabilities refreshed
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request syntax, headers, body, or validated input is malformed or invalid
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The opaque credential is absent, ambiguous, malformed, expired, revoked, or invalid
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The browser mutation did not originate from this application, or the authenticated member lacks the required permission
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request conflicts with the current resource, revision, lease, credential, or idempotency state
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
The request authority or direct peer is outside the configured Jiandu ingress boundary
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.
A required core dependency is unavailable; retry with bounded backoff
Response Headers
Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.