> ## Documentation Index
> Fetch the complete documentation index at: https://docs.baselayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get your application's audiences and allowed origins

> `audiences` are where credentials can be presented: a key-binding JWT's `aud` must be one of them. `allowed_origins` are where baselayer.js may run: a browser check refuses any other page origin. `warnings` are computed on every response.



## OpenAPI

````yaml /api-reference/openapi.json get /acceptance/domains
openapi: 3.1.0
info:
  title: baselayer-api-service
  version: 0.1.0
servers:
  - url: https://api.baselayer.com/
security: []
paths:
  /acceptance/domains:
    get:
      tags:
        - Acceptance
      summary: Get your application's audiences and allowed origins
      description: >-
        `audiences` are where credentials can be presented: a key-binding JWT's
        `aud` must be one of them. `allowed_origins` are where baselayer.js may
        run: a browser check refuses any other page origin. `warnings` are
        computed on every response.
      operationId: acceptance_domains_get
      responses:
        '200':
          description: The two lists and their warnings.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/v1.AcceptanceDomains'
            application/vnd.baselayer.v1+json:
              schema:
                $ref: '#/components/schemas/v1.AcceptanceDomains'
          headers:
            ETag:
              description: >-
                A hash of both sorted lists, quoted; send it back as `If-Match`
                to replace them.
              schema:
                type: string
        '404':
          description: The application no longer exists.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                title: ResourceNotFound
                description: Could not locate the resource for the given URI.
                examples:
                  - type: resource_not_found
                    code: 1
                    message: Could not locate the resource for the given URI.
                    metadata: {}
        '422':
          description: The request is invalid.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
                title: ValidationFailed
                description: The request is invalid.
                examples:
                  - type: validation_failed
                    code: 7112
                    message: The request is invalid.
                    metadata: {}
      security:
        - APIKeyHeader: []
components:
  schemas:
    v1.AcceptanceDomains:
      description: Where credentials can be presented and where baselayer.js may run.
      properties:
        audiences:
          description: >-
            The audiences a key-binding JWT's `aud` must be one of, sorted
            ascending.
          items:
            type: string
          title: Audiences
          type: array
        allowed_origins:
          description: The origins a browser check accepts a page from, sorted ascending.
          items:
            type: string
          title: Allowed Origins
          type: array
        warnings:
          description: >-
            Computed from the two lists on every response and never stored:
            `origin_without_audience` for each origin whose host no audience
            names, bare or as `https://<host>`.
          items:
            $ref: '#/components/schemas/v1.DomainWarning'
          title: Warnings
          type: array
      required:
        - audiences
        - allowed_origins
        - warnings
      title: AcceptanceDomains (v1)
      type: object
    Error:
      properties:
        type:
          type: string
          title: Type
          description: >-
            Stable snake_case name of the error. Branch on this, never on
            `message`.
        code:
          type: integer
          title: Code
          description: Integer catalog code of the error.
        message:
          type: string
          title: Message
          description: For a person reading a log; not stable and not localized.
        metadata:
          additionalProperties: true
          type: object
          title: Metadata
          description: Context documented per `type`.
        request_id:
          anyOf:
            - type: string
            - type: 'null'
          title: Request Id
          description: The `X-Request-ID` of the failed request.
      type: object
      required:
        - type
        - code
        - message
      title: Error
      description: The one body of every error a KYA route answers.
    v1.DomainWarning:
      description: Something in the two lists that is allowed but probably not meant.
      properties:
        code:
          $ref: '#/components/schemas/v1.DomainWarningCode'
          description: What the warning flags.
        origin:
          description: The allowed origin concerned.
          title: Origin
          type: string
        message:
          description: For a person reading it; not stable.
          title: Message
          type: string
      required:
        - code
        - origin
        - message
      title: DomainWarning (v1)
      type: object
    v1.DomainWarningCode:
      description: What a domains warning flags. Values may be added.
      enum:
        - origin_without_audience
      title: DomainWarningCode
      type: string
  securitySchemes:
    APIKeyHeader:
      type: apiKey
      in: header
      name: X-API-Key

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.