#+title: MCIAS
#+created: <2025-05-09 Fri 13:42>

* MCIAS

  MCIAS is the metacircular identity and access system.

  It currently provides the following across metacircular services:

  1. User password authentication.
  2. User token authentication.
  3. Database credential authentication.

  Future work should consider adding support for:
  1. TOTP
  2. Policy management.

** API endpoints

*** The login type

    The general datastructure used to log in should look like:

#+begin_src: json
{
    "version": "v1",
    "login": {
        "user": "username",
	"password": "secret password",
	"token": "1234567890",
	"totp": "123456"
    }
}
#+end_src

     Any fields that aren't used should be omitted. The =version= and
     =login.user= types are required, as well as the appropriate
     credential field.

*** =/v1/login/password=

    The request should be a JSON object:


*** =/v1/login/token=

*** =/v1/credentials/database=