zammad/config/routes/auth.rb

Zammad::Application.routes.draw do
  api_path = Rails.configuration.api_path

  # omniauth
  match '/auth/:provider/callback',         to: 'sessions#create_omniauth',      via: [:post, :get, :puts, :delete]

  # sso
  match '/auth/sso',                        to: 'sessions#create_sso',           via: [:post, :get]

  # sessions
  match api_path + '/signin',               to: 'sessions#create',               via: :post
  match api_path + '/signshow',             to: 'sessions#show',                 via: [:get, :post]
  match api_path + '/signout',              to: 'sessions#destroy',              via: [:get, :delete]

  match api_path + '/available',            to: 'sessions#available',            via: :get

  match api_path + '/sessions/switch/:id',  to: 'sessions#switch_to_user',       via: :get
  match api_path + '/sessions/switch_back', to: 'sessions#switch_back_to_user',  via: :get
  match api_path + '/sessions',             to: 'sessions#list',                 via: :get
  match api_path + '/sessions/:id',         to: 'sessions#delete',               via: :delete

end