Public API · v1

Public APIs of CodeB Conference.

Every endpoint listed on this page can be called without a Bearer token. You can integrate forms, OIDC-based sign-in, signup-flows, or live conference signaling into your own application without provisioning a CodeB user account first. Admin-only and OIDC Bearer-gated routes are intentionally not listed here — they live behind the admin UI for signed-in operators.

Hosted by: Aloaha Limited · one IIS site per tenant · the path is always /<name>.ashx on the tenant’s base URL (e.g. https://phone.codeb.io/signal.ashx). All endpoints honour the tenant by inspecting the request Host: header — no API key needed.

/signal.ashx

WebRTC signaling WebSocket + public health + camera list + bridge ring-push endpoints.

Read the API doc →

/oidc.ashx

Built-in OpenID Connect IdP — discovery, JWKS, authorize, token, end-session, revoke.

Read the API doc →

/contact.ashx

Drop a contact-form message into the IIS SMTP pickup directory. Captcha-gated.

Read the API doc →

/signup.ashx

Create a new (disabled) user; activation email follows. Captcha-gated, HA1-only.

Read the API doc →

/activate.ashx

Consume the one-time activation token sent by signup. Flips the disabled flag.

Read the API doc →

/captcha.ashx

Stateless math captcha used by contact + signup. HMAC-signed, no cookies.

Read the API doc →

/diag.ashx

Client-side WebRTC diagnostic log append. POST is public; GET is admin-gated.

Read the API doc →
Need an admin endpoint? Admin-only and OIDC Bearer-gated routes are documented inside the admin UI itself (visible only to signed-in admins on this host). The public API set on this page is the surface you can integrate against without provisioning a CodeB user.

Questions? Ask us · Index: All public APIs