Replace a credential's IP allowlist

PUT

https://tenant.api.corpx.com/v1/backoffice/tenants/:tenantId/credentials/:clientId/ip-allowlist

Takes the whole set. Removals apply immediately; additions wait 18h (pendingUntil). If every entry is new, the old list keeps applying during the grace period — the intent there is changing IPs, not being locked out.

Rejects an empty list, more than 20 entries, 0.0.0.0/0 and any prefix wider than /24 (422 ip_allowlist_required).

Takes the whole set. **Removals apply immediately; additions wait 18h** (`pendingUntil`). If every entry is new, the old list keeps applying during the grace period — the intent there is changing IPs, not being locked out. Rejects an empty list, more than 20 entries, `0.0.0.0/0` and any prefix wider than `/24` (`422 ip_allowlist_required`).

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

tenantIdstringRequired

Tenant identifier (same value as X-Tenant-Id).

clientIdstringRequired

Credential (client_id) the subresource belongs to.

Request

This endpoint expects an object.

ipslist of stringsRequired

Response

Allowlist stored.

clientIdstring

ipslist of strings

The set in force right now.

pendingIpslist of stringsOptional

Complete set that takes over at pendingUntil (additions wait 18h).

pendingUntildatetimeOptional

Errors

403

Forbidden Error

422

Unprocessable Entity Error