Verify Location

Test connection to cloud storage location.

Required Role: OPERATOR or higher (useful for troubleshooting)

This endpoint:

1. Retrieves credentials from Vault
2. Creates appropriate connector for the provider
3. Tests connection to the bucket/container
4. Verifies permissions (read, write, list)
5. Checks region configuration

Success response (200 OK):

{
    "verified": true,
    "verified_at": "2025-10-22T12:00:00Z",
    "details": {
        "bucket_exists": true,
        "permissions": {
            "list": true,
            "read": true,
            "write": true,
            "delete": false
        },
        "region_match": true
    }
}

Client error (400 Bad Request): Returned for user/configuration errors (invalid credentials, bucket not found, access denied)

{
    "verified": false,
    "error": "Access denied: invalid credentials",
    "details": {
        "error_code": "AUTHENTICATION_FAILED"
    }
}

External vault resolution error (400 Bad Request): Returned when external vault (1Password, Doppler, Infisical) secret resolution fails

{
    "verified": false,
    "error": "Failed to resolve secrets: service_account_json: FIELD_NOT_FOUND",
    "details": {
        "error_code": "VAULT_FIELD_NOT_FOUND",
        "message": "Failed to resolve secrets: ...",
        "field_name": "service_account_json",
        "reference": "op://vault/item/field",
        "vault_type": "onepassword"
    }
}

Error codes: VAULT_FIELD_NOT_FOUND, VAULT_ITEM_NOT_FOUND, VAULT_ACCESS_DENIED, VAULT_INVALID_REFERENCE, VAULT_CONNECTION_ERROR, VAULT_SDK_NOT_INSTALLED, VAULT_UNKNOWN

Server error (500 Internal Server Error): Returned for unexpected errors (bugs, internal issues)

{
    "verified": false,
    "error": "Unknown error: ...",
    "details": {
        "error_code": "UNKNOWN_ERROR"
    }
}

Service unavailable (503 Service Unavailable): Returned when external storage service is unreachable

{
    "verified": false,
    "error": "Service request failed",
    "details": {
        "error_code": "SERVICE_REQUEST_ERROR"
    }
}