# Airlock authentication user-context data edit route
# Date: 2026-11-10

POST `/auth/rest/public/authentication/data/edit` is a server-registered Airlock IAM user-context-data handler that is not emitted by the retained current client URL builders. The Airlock Loginapp OpenAPI definition identifies operation `/public/authentication/editData`: it accepts an application/json object whose keys are configured user-context items, updates only supplied items, and treats `null` values as deletion requests. Successful and validation-error responses use the authentication-flow result and JSON:API error document schemas.

The state-changing POST operation was not invoked during this mapping pass. Read-only method discovery establishes identical dispatch across all eight German Airlock tenants: GET returns the 132-byte JSON:API 405 response, while CSRF-correct OPTIONS returns empty 200 with `Allow: POST,OPTIONS`.

host	GET exchange	OPTIONS exchange
infoportal.baloise.de	01a1c486-b9aa-7673-bb84-38f8383bd4e6	01a1c486-ba3a-74dd-9c4f-1494c70467b4
maklerportal.baloise.de	01a1c486-c4ae-75bd-8075-f34fed9ec828	01a1c486-c543-70f7-86da-ccbf0e51f837
mein-portal-registrierung.baloise.de	01a1c486-ffc3-755c-8403-d8cf8e6249b1	01a1c487-004f-74c0-83ed-620bb92db3a9
mein-portal.baloise.de	01a1c486-f311-72f7-97a7-6053ebf2700a	01a1c486-f39e-72ef-89c5-98e56b707dcb
si-portal.baloise.de	01a1c486-d1e7-7775-be81-cee9dd452061	01a1c486-d280-7017-a627-068ee041c1a6
va.baloise.de	01a1c487-0b7a-71ca-8e55-e5d7be710f72	01a1c487-0c06-7559-b8a4-ab9a9eeab949
vertriebsservice.baloise.de	01a1c486-dce9-76a5-bee2-1661cc4feeb9	01a1c486-dd8b-77c4-8bfc-abf96ba6e9da
zeus-portal.baloise.de	01a1c486-e7f7-718b-8825-839a4886ee08	01a1c486-e892-75b7-ac12-a51a69c6270f

Source schema evidence: captured Airlock IAM 8.5 Loginapp OpenAPI document `01a1c42e-60e8-718f-988b-1e32769a45e3`.