Auth
Who the API sees you as: subject, kind, organization, region and dev scopes.
Get the caller
The caller as dev verified it - subject, kind, organisation, region and dev scopes.
For the umbrella cli: ciresk ci auth login and ciresk ci auth status ask it after ci, on the same api host, so a key with dev scopes and no ci ones (the agent key of) is filed under its organisation and shown with its scopes. scopes holds only dev's: introspection cuts a key's scopes to the asking product.
Response
kind- a csk_ key is a serviceOne of
user,agent,service org_idregion- One of
eu,us scopes- the caller's dev scopes
subject- user:<id>, agent:<id>, key:<id> or service:<name>
curl "$CIRESK_API/v1/dev/auth/whoami" \
-H "Authorization: Bearer $CIRESK_KEY"