> ## Documentation Index
> Fetch the complete documentation index at: https://docs.platform.arb.inc/llms.txt
> Use this file to discover all available pages before exploring further.

# Proxy requests to internal endpoints

> Routes requests from the public API to internal auth service endpoints by extracting the user token from the X-Forwarded-Authorization header. Requires `api.internal.proxy` permission.



## OpenAPI

````yaml api-reference/auth.yaml post /internal/public-api
openapi: 3.0.3
info:
  title: auth
  description: >-
    The Auth Service is the single source of truth for all accounts and their
    permissions, managing authentication and access control across the platform.
    It maintains efficiency at scale by issuing access tokens to accounts when
    they log into the platform and providing public keys for other services to
    verify them.
  version: 1.0.0
servers:
  - url: https://auth.platform.arb.inc
security: []
tags:
  - name: /
  - name: authenticate
  - name: internal
  - name: organizations
  - name: sessions
  - name: users
paths:
  /internal/public-api:
    post:
      tags:
        - internal
      summary: Proxy requests to internal endpoints
      description: >-
        Routes requests from the public API to internal auth service endpoints
        by extracting the user token from the X-Forwarded-Authorization header.
        Requires `api.internal.proxy` permission.
      operationId: proxyPublicAPI
      parameters:
        - name: method
          in: query
          required: true
          schema:
            type: string
          description: HTTP method for the target endpoint
          example: POST
        - name: endpoint
          in: query
          required: true
          schema:
            type: string
          description: Target endpoint path
          example: organizations/users/list
      responses:
        '200':
          description: Request successfully proxied
        '404':
          description: Endpoint not found
      security:
        - bearerAuth: []
components:
  securitySchemes:
    bearerAuth:
      type: http
      description: access token
      scheme: bearer
      bearerFormat: JWT

````