雲端基礎設施
身分、租戶與授權
網站、團隊角色、API 權杖、用於助理的 OAuth、服務帳戶與活動記錄。
身分決定了誰在發出請求以及他們可以執行什麼操作。每個請求都限定於單一網站，且每個權杖的權限皆受限於其背後人員或服務帳戶的角色。
核心物件
- 網站 (Sites)。 租戶邊界。資料絕不會在網站之間流動。
- 團隊成員與角色。 擁有者、管理員、編輯者與自訂角色，以及存取請求。
- 權杖 (Tokens)。 個人存取權杖、用於助理的 OAuth 存取權，以及服務帳戶權杖。請參閱 身分驗證。
- 活動記錄 (Activity log)。 在後台或透過 API 進行的每一項變更，以及執行變更的人員。
API 的運作方式
GET /whoami顯示目前權杖可以執行的操作。- 使用 Management API 列出與建立網站、讀取使用量與活動記錄。
- 客戶可以存取的內容屬於 客戶、會員資格與權益，而非身分系統。
API 開放的範圍
- Site team RBAC (custom roles, access requests), personal access tokens, service accounts and OAuth 2.1 for the Management API, customer session tokens可用
- API
- PAT (
knr_pat_), OAuth 2.1 (knr_at_) with site scope;auth.whoami?websiteId=reports role vs. token scope; Customer Bearer (knr_cat_) bound to(websiteId, contactId) - Elements
<kanorio-login>- 託管網站
/settings/team,/settings/team/roles,/account/api-access- Webhooks
team.accessRequest.created
- Custom end-user application roles (e.g. teacher / TA / branch manager in your own app)不提供
- 替代做法
- Kanorio separates operational RBAC (site team), customer commercial entitlements (
Entitlement), and plan entitlements. Fine-grained custom app roles (e.g. "teacher can only view students in class B") are not offered as a platform primitive; enforce them in your own application backend or an authorization service such as OpenFGA.
- Enterprise SSO (SAML / OIDC / SCIM) & custom contractual uptime SLA不提供
- 替代做法
- Kanorio provides Google OAuth, Passkeys (WebAuthn), TOTP 2FA, free team RBAC with system roles (
OWNER,ADMIN) plus up to 20 custom roles per site, and live platform status atstatus.kanorio.com. SAML/SCIM directory sync and custom SLA contracts are not offered.
API 參考
Webhook 事件
- site.subscription.upcomingRenewal · Fired before an annual plan renews when annual add-ons or pending add-on / platform fees will be charged on the same invoice.
- site.subscription.addOnPriceChange · Fired at least 30 days before add-on prices change for the site, with the per-level price changes and effective date.
- team.accessRequest.created · Fired when a team member requests permissions they are missing, so people who manage the team can review it.
近期變更
- 2026-10-28 Service account tokens (knr_sa_)
- 2026-10-24 Fine-grained scopes for publishing, domains, developer settings, media, orders and collection schemas
- 2026-10-23 Activity log redacts internal fields of platform actions
- 2026-10-14 OAuth client authentication, scope defaults and stability labels
給網站擁有者
在後台如何使用這項產品，請見說明中心。
開啟說明中心