REL-ID User Account Recovery – Credential Setup Endpoint

Endpoint:
GET /relid/authserver/account-recovery-credential

Description:
This endpoint allows a REL-ID user to set up their credentials (e.g., password, email, mobile number) via a web interface after completing the account recovery identity verification (IDV) flow. On successful setup, the user is redirected to the registered redirect URI associated with the token.

🔐 Authentication

No authentication required.

📥 Query Parameters

📥 Request Headers

No headers required.

📤 Request Body

No request body.

📬 Response

A successful request results in a 302 Redirect to the redirect URI associated with the token.

📘 Example Request

GET https://auth.relid.com:8006/relid/authserver/account-recovery-credential?token=243ce3b6-ca82-4821-b999-542d6be84735

📘 Example Response

HTTP/1.1 302
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Set-Cookie: SESSION=; Max-Age=0; Expires=Thu, 1 Jan 1970 00:00:00 GMT;
Path=/relid/authserver; Secure; HttpOnly; SameSite=Lax
Location:
https://auth.relid.com:8006/relid/authserver/oauth/authorize?client_id=YzA4
MjlmNjgtNGI
0ZC00MmFjLTgyOWYtNjg0YjRkMTJhY2I0&response_type=code&scope=all+openid&state
=12345&redirect_uri=https://localhost:8080/
Content-Language: en-US
Content-Length: 0
Date: Thu, 03 Aug 2023 14:19:34 GMT
Keep-Alive: timeout=60
Connection: keep-alive

📝 Notes

• This is typically used when a user has completed the IDV flow for account recovery.
• The redirect URI must be pre-registered and will be derived from the token context.