api/v1/settings/domain/aliases/{search?}

import requests

def auth(username, password, two_factor_code, url):
    authurl = url + "/api/v1/auth/authenticate-user"
    myobj = {
        'username': username,
        'password': password
    }
    data = requests.post(authurl, json=myobj)
    refreshToken = data.json().get('refreshToken', None)
    accessToken = data.json().get('accessToken', None)
    access_info = {
        'accessToken': accessToken,
        'refreshToken': refreshToken
    }
    return access_info

def post_to_export_users(username, password, two_factor_code, base_url):
    access_info = auth(username, password, two_factor_code, base_url)
    access_token = access_info.get('accessToken')

    if access_token:
        headers = {
            'Authorization': f'Bearer {access_token}',
            'Content-Type': 'application/json'
        }
        response = requests.post(base_url + '/api/v1/settings/domain/export-users', headers=headers)
        return response.status_code, response.text
    else:
        return None, {'error': 'Authentication failed, no access token retrieved'}

username = 'user@domain.com'
password = 'password'
two_factor_code = '' # Leave empty if 2FA is not enabled
base_url = 'https://mail.yourdomain.com';

status_code, response = post_to_export_users(username, password, two_factor_code, base_url)
print(f'Status Code: {status_code}')
print('Response:', response)

Currently there is no list of all the calls in on a single page. Using the link above breaks the calls down to there areas.

1. Authenticate a system admin
2. Enumerate domains
3. Iterating through domains
   1. Discover domain admin
   2. Impersonate domain admin
   3. Export list of users
   4. Export list of aliases