Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions api/hastefuncapi/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -89,13 +89,29 @@ These endpoints use `FUNCTION`-level auth regardless of development mode (intend

| Method | Route | Description |
|--------|-------|-------------|
| GET | `GetSessionBootstrap` | Trusted current-user, role, settings, and publishing capabilities for one-call application startup. Accepts no caller identity parameters. |
| GET | `GetUsers` | All users. Requires `administrators` role. |
| GET | `GetUserById` | Single user by `userId`. |
| PUT | `PutUser` | Create or update a user. Handles invitations, reinvitations, role assignment, and reactivation. |
| DELETE | `DeleteUser` | Delete a user by `userId` (email). Requires `administrators` role. |
| GET | `GetAdminSettings` | All admin settings. Requires `administrators` role. |
| PUT | `PutAdminSettings` | Update admin settings. Requires `administrators` role. |

#### Session Bootstrap

`GetSessionBootstrap` resolves identity from the SWA client-principal header,
loads current HASTE ACL state, and returns user and publishing configuration in
one response. Stable active sessions are read-only; inactive, pending, and
deleted accounts receive no application roles.

### Published Datasets

`GetPublishedDatasets` returns `ETag`, `Cache-Control`, and `X-Haste-Cache`
headers. Send `If-None-Match` to receive an empty `304` for an unchanged fresh
representation. The bounded process-local cache expires within five seconds,
deduplicates concurrent identical reads, and is invalidated after publishing
mutations.

### Utilities

| Method | Route | Description |
Expand Down
Loading
Loading