tenant — Blesyum Core API

GET/api/v1/tenant

Tenant profile — requires `core.tenant.view` (default-deny).

Oturum

İstek

curl -X GET "https://api.blesyum.com/api/v1/tenant" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

PATCH/api/v1/tenant

Update the tenant profile/localization — requires `core.tenant.manage`

Oturum

(ORG-02/03, SET-01/02). Only provided fields change.

İstek

curl -X PATCH "https://api.blesyum.com/api/v1/tenant" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

GET/api/v1/tenant/invitations

List pending invitations (requires `core.users.view`).

Oturum

İstek

curl -X GET "https://api.blesyum.com/api/v1/tenant/invitations" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/invitations/bulk

Invite many people at once (ORG-07). Each email is validated and seat-checked

Oturum

independently; the privilege ceiling is checked once. Capped at 50 per call.

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/invitations/bulk" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/invitations/create

Invite a person to the active tenant (ORG-07). Requires `core.users.invite`.

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/invitations/create" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/invitations/resend

Re-send a pending invitation with a fresh link (ORG-07).

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/invitations/resend" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/invitations/revoke

Revoke a pending invitation (requires `core.users.invite`).

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/invitations/revoke" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/logo

Upload the organization logo (organization-settings single-step action): validate

Oturum

the file (sanitize if SVG) → put it in R2 → write the live `tenant_branding.logo_url`. Requires `core.settings.manage`.

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/logo" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

DELETE/api/v1/tenant/logo

Remove the organization logo (idempotent). Requires `core.settings.manage`.

Oturum

İstek

curl -X DELETE "https://api.blesyum.com/api/v1/tenant/logo" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

GET/api/v1/tenant/settings

Read tenant settings — requires `core.settings.view`.

Oturum

İstek

curl -X GET "https://api.blesyum.com/api/v1/tenant/settings" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

PATCH/api/v1/tenant/settings

Merge a patch into tenant settings — requires `core.settings.manage`

Oturum

(SET-03: security policies like `require_2fa`, IAM-18).

İstek

curl -X PATCH "https://api.blesyum.com/api/v1/tenant/settings" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/transfer-ownership

Transfer workspace ownership to another active member (owner only, ORG-12).

Oturum

Step 1 (ORG-12): the owner PROPOSES a transfer. The swap is deferred until the proposed owner confirms.

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/transfer-ownership" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/transfer-ownership/cancel

Either party withdraws the pending proposal (ORG-12).

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/transfer-ownership/cancel" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}

POST/api/v1/tenant/transfer-ownership/confirm

Step 2 (ORG-12): the PROPOSED owner confirms; ownership actually moves.

Oturum

İstek

curl -X POST "https://api.blesyum.com/api/v1/tenant/transfer-ownership/confirm" \
  -H "Authorization: Bearer <oturum-token>" \
  -H "Accept: application/json"

Yanıt

{
  "data": "…",
  "trace_id": "01JC…"
}