Cowdidocs
API ReferenceBranding

Delete an organization's brand

DELETE
/v1/branding/{organizationId}

Authorization

Cowdi_Sales_KYC_backendBearerAuth
AuthorizationBearer <token>

Cowdi backend-compatible RS256 JWT. sub may be the global user id or a Firebase auth id; Firebase auth-id subjects and missing organization claims are resolved through the backend user/access endpoints. Validated against the configured JWKS (lib/backend-auth.ts).

In: header

Path Parameters

organizationId*string

Backend organization id / tenant slug.

Lengthlength <= 255

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/v1/branding/dawa"
Empty
{  "code": "INVALID_PARAMS",  "description": "user_id must be a UUID",  "identifier": "string",  "invalid_params": [    {      "path": "user_id",      "reason": "must be a UUID",      "sub_code": "string"    }  ]}
{  "code": "INVALID_PARAMS",  "description": "user_id must be a UUID",  "identifier": "string",  "invalid_params": [    {      "path": "user_id",      "reason": "must be a UUID",      "sub_code": "string"    }  ]}
{  "code": "INVALID_PARAMS",  "description": "user_id must be a UUID",  "identifier": "string",  "invalid_params": [    {      "path": "user_id",      "reason": "must be a UUID",      "sub_code": "string"    }  ]}
{  "code": "INVALID_PARAMS",  "description": "user_id must be a UUID",  "identifier": "string",  "invalid_params": [    {      "path": "user_id",      "reason": "must be a UUID",      "sub_code": "string"    }  ]}
{  "code": "INVALID_PARAMS",  "description": "user_id must be a UUID",  "identifier": "string",  "invalid_params": [    {      "path": "user_id",      "reason": "must be a UUID",      "sub_code": "string"    }  ]}

Sign In POST

Exchange a custom token (obtained from /v1/auth/exchange) for ID and refresh tokens. **Authentication Flow:** 1. Exchange partner JWT for custom token via `/v1/auth/exchange` 2. Use custom token to sign in via this endpoint 3. Receive ID token and refresh token 4. Use ID token in Authorization header for API calls 5. Refresh ID token using `/v1/auth/refresh` before expiration **Important:** Custom tokens are one-time use only.

Get an organization's brand (public) GET

Public, unauthenticated — the white-label surface reads this before login.