POST /unlock
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.
POST
/api/v1/security/unlockAuthorization
AuthorizationBearer token (JWT) · headerrequiredJWT from POST /api/v1/auth/login sent as Authorization Bearer.
Request body
requiredapplication/jsonemailstring<email>requiredmatches ^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
pinstringrequiredmatches ^\d{6,8}$
Responses
200
Operation completed
any201
Record created
400
Invalid request
detailstringrequired401
Session expired or revoked
detailstringrequired403
Permission denied or self-approval
detailstringrequired409
Record changed or no longer actionable
detailstringrequired423
Register locked
detailstringrequired