Get the RADIUS second-factor configuration

GET 
/config/radius

Returns the RADIUS server settings.

The shared secret is never returned. Required role: admin or superadmin. On an installed system the document exists in its default state: {id, server: "", port: null, enabled: false, timeout: 30000}, without createdAt or updatedAt. The body is JSON null only if the document has been removed.

Responses

200

The RADIUS configuration, or null.

401

No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.

403

The token's role is not allowed for this operation, or the token's scopes exclude the route (Scope not allowed by token).