The identities a person owns

GET

/persons/{person_id}/identities

curl --request GET \
  --url https://quikstik-core.fly.dev/persons/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/identities \
  --header 'Authorization: Bearer <token>' \
  --header 'x-tenant-id: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0'

• Production

Every identity (email, phone, viator_relay, gyg_relay, ota_ref) attached to this person, oldest first, each with who attached it (import:viator, relay:thread:<id>, operator:<user>, backfill) and the one-line evidence. merged_into is set when the person has been merged into another (the survivor). Tenant-scoped: a person of another tenant is 404.

Authorizations

• bearerAuth
• operatorKey

Parameters

Path Parameters

person_id

required

string format: uuid

Header Parameters

x-tenant-id

required

string format: uuid

Tenant identifier (UUID).

Authn/authz semantics are intentionally TBD for this contract slice; this header exists to keep the contract explicitly multi-tenant from day 0.

Responses

200

The person’s identities.

Media typeapplication/json

object

person_id

required

string format: uuid

merged_into

The survivor when this person was merged into another.

string format: uuid

nullable

identities

required

Array<object>

object

kind

required

string

Allowed values: email phone viator_relay gyg_relay ota_ref

value

required

Normalised form.

string

attached_at_ms

required

integer format: int64

attached_by

required

import:viator | relay:thread:<id> | operator:<user> | backfill

string

evidence

required

string

Example

{
  "identities": [
    {
      "kind": "email"
    }
  ]
}

401

Missing or invalid session bearer token

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

403

The session’s effect authority does not cover this operation

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

404

Expired, consumed, unknown, or unresolvable — indistinguishable by design

Media typeapplication/json

object

reason

required

string

Example ^generated

{
  "reason": "example"
}

503

No durable backend is wired for this operation (fail-closed)

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}