Change a brand

Its name, branding, links, sign-up switch and built-in ways to sign in; never its issuer slug. Needs `org.brands.edit`. Recorded as `brand.updated`; send null to clear a setting.

PATCH/v1/orgs/{org}/brands/{brand}

Its name, branding, links, sign-up switch and built-in ways to sign in; never its issuer slug. Needs org.brands.edit. Recorded as brand.updated; send null to clear a setting.

Authorization

bearer

AuthorizationBearer <token>

An org API key (sk_live_…, sk_test_…), or an access token from the Synq issuer (the synq brand, on the accounts host) for this API.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

name?string

Length1 <= length <= 100

sign_up_enabled?boolean

Whether someone new may sign up by signing in. On by default.

sign_in_cancels_deletion?boolean

Whether a user who asked to be deleted cancels it by signing in again within the 30 days. Off by default: the sign-in is refused.

breached_password_check?boolean

Whether a new password that appears in a known data breach is refused. On by default. The check asks Have I Been Pwned's range API about the first five characters of the password's SHA-1 only, so the password never leaves Synq. The audit log names this setting breach_check.

show_last_used?boolean

Whether the sign-in page marks the way a browser last signed in at this brand, "Last used". On by default. It is remembered in a cookie on that device (only the method, and a wallet's name), never per account, so it reveals nothing about who has an account. Anyone using the same browser sees it, so turn it off for a brand used on shared devices.

built_in_methods?

Turns built-in ways to sign in on (true) or off (false); the ways it leaves out stay as they are

primary_color?string|null

background_color?string|null

support_email?|

Formatemail

Lengthlength <= 254

privacy_policy_url?|

Formaturi

Lengthlength <= 2048

terms_of_service_url?|

Formaturi

Lengthlength <= 2048

issuer_slug?string

Never changes: sending it is refused with issuer_slug_immutable.

Response Body

`application/json`

`application/problem+json`

curl -X PATCH "https://example.com/v1/orgs/string/brands/string" \  -H "Content-Type: application/json" \  -d '{}'

{  "id": "string",  "org_id": "string",  "issuer_slug": "string",  "issuer": "string",  "custom_domain_issuer": "string",  "name": "string",  "is_default": true,  "sign_up_enabled": true,  "sign_in_cancels_deletion": true,  "breached_password_check": true,  "show_last_used": true,  "built_in_methods": {    "email": true,    "password": true,    "passkey": true,    "wallet": true  },  "logo_url": "string",  "primary_color": "string",  "background_color": "string",  "support_email": "string",  "privacy_policy_url": "string",  "terms_of_service_url": "string",  "created_at": "2019-08-24T14:15:22Z"}

AuthorizationCopy Anchor Link

Path ParametersCopy Anchor Link

Request BodyCopy Anchor Link

Response BodyCopy Anchor Link

200application/json

400application/problem+json

401application/problem+json

403application/problem+json

404application/problem+json

422application/problem+json

429application/problem+json

Authorization

Path Parameters

Request Body

Response Body

`application/json`

`application/problem+json`

`application/problem+json`

`application/problem+json`

`application/problem+json`

`application/problem+json`

`application/problem+json`