验证员工邮箱密码并返回基本资料（不签发令牌）

POST

/internal/v1/users/authenticate/

已上线：生产1.20.6／测试1.20.6b0。
Requires application AK/SK and independent user:authenticate Scope. JSON body only: username is the full employee email; password is not trimmed. Returns the same eight basic fields as the employee directory. Unknown, inactive, ambiguous accounts and incorrect passwords all return 401 INVALID_CREDENTIALS. Never issues or updates employee tokens, password hashes or sign-in metadata. Fixed-window limits per minute: 60/application and 10/email across applications by default. HTTPS and server-to-server calls only; never put credentials in URLs.

请求参数

Authorization

API Key

在 header 添加参数

X-NDB-Access-Key

示例：

X-NDB-Access-Key: ********************

Header 参数

Body 参数application/json必填

示例

{
    "username": "harrisliao@mindsetech.com",
    "password": "User1@3"
}

请求示例代码

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location 'https://crm-api.mindsetech.com/internal/v1/users/authenticate/' \
--header 'Idempotency-Key: {{$guid}}' \
--header 'X-NDB-Access-Key: <api-key>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "username": "harrisliao@mindsetech.com",
    "password": "User1@3"
}'

返回响应

🟢200

application/json

Bodyapplication/json

示例

{
    "code": 0,
    "message": "string",
    "data": {
        "id": 0,
        "email": "string",
        "name_cn": "string",
        "name_en": "string",
        "title": "string",
        "status": "active",
        "teams_id": 0,
        "team_name": "string"
    }
}

🟠400

🟠401

🟠403

🟠405

🟠415

🟠429

🔴503

修改于 2026-10-23 06:34:42

查询 NDB 员工基本资料

按手机号或邮箱精确查询专家基本资料