Update Authorization Settings

Updates the project's membership authorization settings.

Membership settings control how authentication and authorization behave for your project — allowed sign-in methods, registration rules, password complexity, and passkey options.

This endpoint updates the authorization settings — only the fields you send are changed.

Updates the project's membership authorization settings.

put

Authorizations

Bearer

HTTPRequired

JWT Bearer Authorization

Path parameters

versionstring · nullableRequired

The CodeMash API version used to fetch data from the API. If not specified, the last version will be used. E.g.: v3

Body

multipart/form-dataapplication/json

Updates the project's membership authorization settings.

settingstring · nullableOptional

defaultRolesstring[] · nullableOptional

allowedRegistrationRolesstring[] · nullableOptional

allowGuestUsersbooleanOptional

guestCleanupPeriodDaysinteger · int32 · nullableOptional

userRegistersAsRolestring · nullableOptional

guestRegistersAsRolestring · nullableOptional

allowedRegisterRolesstring[] · nullableOptional

needVerificationbooleanOptional

verificationEmailTemplatestring · nullableOptional

deactivationEmailTemplatestring · nullableOptional

allowInviteUsersbooleanOptional

allowDeactivateUsersbooleanOptional

inviteUserEmailTemplatestring · nullableOptional

invitationExpirationinteger · int32 · nullableOptional

emailVerificationExpirationinteger · int32 · nullableOptional

deactivationExpirationinteger · int32 · nullableOptional

defaultSubscribeToNewsbooleanOptional

minLengthinteger · int32Optional

maxLengthinteger · int32 · nullableOptional

minNumbersinteger · int32 · nullableOptional

maxNumbersinteger · int32 · nullableOptional

minUpperinteger · int32 · nullableOptional

maxUpperinteger · int32 · nullableOptional

minLowerinteger · int32 · nullableOptional

maxLowerinteger · int32 · nullableOptional

minSpecialinteger · int32 · nullableOptional

maxSpecialinteger · int32 · nullableOptional

allowedSpecialstring · nullableOptional

projectIdstringRequired

ID of your project. Can be passed in a header as norbix-project-id.

envstring · nullableOptional

Target environment for this request (e.g. TEST, STAGING). Optional — when omitted the request runs against PROD. Can be passed in a header as norbix-env.

cultureCodestring · nullableOptional

Specify culture code when your response from the API should be localised. E.g.: en

timeZoneIdstring · nullableOptional

TimeZone

correlationIdstring · nullableOptional

CorrelationId for each request

Responses

200

OK

application/json

put/{version}/membership/authorization

HTTPcURLJavaScriptPython

PUT /{version}/membership/authorization HTTP/1.1
Host: hub.norbix.ai
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: multipart/form-data
Accept: */*
Content-Length: 817

{
  "setting": "text",
  "defaultRoles": [
    "text"
  ],
  "allowedRegistrationRoles": [
    "text"
  ],
  "allowGuestUsers": true,
  "guestCleanupPeriodDays": 1,
  "userRegistersAsRole": "text",
  "guestRegistersAsRole": "text",
  "allowedRegisterRoles": [
    "text"
  ],
  "needVerification": true,
  "verificationEmailTemplate": "text",
  "deactivationEmailTemplate": "text",
  "allowInviteUsers": true,
  "allowDeactivateUsers": true,
  "inviteUserEmailTemplate": "text",
  "invitationExpiration": 1,
  "emailVerificationExpiration": 1,
  "deactivationExpiration": 1,
  "defaultSubscribeToNews": true,
  "minLength": 1,
  "maxLength": 1,
  "minNumbers": 1,
  "maxNumbers": 1,
  "minUpper": 1,
  "maxUpper": 1,
  "minLower": 1,
  "maxLower": 1,
  "minSpecial": 1,
  "maxSpecial": 1,
  "allowedSpecial": "text",
  "projectId": "text",
  "env": "text",
  "resolvedEnv": {
    "value": "text",
    "isProd": true
  },
  "cultureCode": "text",
  "timeZoneId": "text",
  "correlationId": "text"
}

multipart/form-dataapplication/json

200

OK

{
  "responseStatus": {
    "isSuccess": true
  }
}

In the dashboard

Manage this visually in Norbix Cloud — see Membership → Settings.

Use it from code

Every Norbix SDK exposes this endpoint as a method — see Update Authorization Settings in the SDK reference, with examples in every language.