Audit trail

Mint a 5-minute audit-authz claim asserting Owner of the resolved organization, for the console to present to activity-api as X-Audit-Authz alongside its Zitadel bearer token.

A caller who is not an Owner of the resolved organization never reaches this handler — require_permission("audit:claim") raises 403 first.

Response Body

curl -X GET "https://example.com/api/v1/me/audit-authz"

{  "audit_authz_token": "string",  "organization_id": "string",  "expires_at": "string"}