Finalize Xero multi-org connect

POST /api/v1/xero/oauth/select-tenant

Called by the picker page once the user chooses one of the parked tenants. Persists the connection row keyed to the selected tenantId.

Operation ID: select_tenant_api_v1_xero_oauth_select_tenant_post · View as markdown · OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Request body

Schema: XeroSelectTenantRequest

nonce string required: Server-issued nonce from the OAuth callback
tenant_id string required: Xero tenantId to bind to this business

Responses

201 Successful Response

400 Bad Request - Invalid input

401 Unauthorized - Authentication required

403 Forbidden - Insufficient permissions

422 Validation Error

Schema: HTTPValidationError

detail array · ValidationError ValidationError

5 fields

loc array · string | integer required
msg string required
type string required
input object
ctx object

Code samples

POST /api/v1/xero/oauth/select-tenant

bash

curl -X POST 'https://api.ondayzero.com/api/v1/xero/oauth/select-tenant' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID' \
  -H 'Content-Type: application/json' \
  -d '{
  "nonce": "string",
  "tenant_id": "string"
}'

javascript

const response = await fetch('https://api.ondayzero.com/api/v1/xero/oauth/select-tenant', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer dz_your_token',
    'x-business-id': 'YOUR_BUSINESS_ID',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
  "nonce": "string",
  "tenant_id": "string"
}),
});
const data = await response.json();

python

import httpx

headers = {
    "Authorization": "Bearer dz_your_token",
    "x-business-id": "YOUR_BUSINESS_ID",
}

payload = {
  "nonce": "string",
  "tenant_id": "string"
}

response = httpx.post("https://api.ondayzero.com/api/v1/xero/oauth/select-tenant", headers=headers, json=payload)
data = response.json()