0 Fork 0

Files

T

John O'Keefe cc5677eb17 docs(auth,users,devices,progress,matching): Beam batch 8 — WO5 backfill complete

14 endpoints backfilled: devices pending/approve/reject; users
password/profile/profile-delete self-service (admin variants in prose);
admin list_users + update_user_max_devices; progress history; book
matching; new password-rules doc.

Gate fix: authLabel missed JWT middleware written inline as
createJWTMiddleware(cfg) (uppercase 'JWT') — reported auth 'none' for
/api/auth self-service routes and would have for any wrapper-inlined
group. Labeled 'JWTMiddleware' + fallthrough 'jwt' case.

Claude registry: 12 entries. Drift fixed by gate: list_users on-device —
handler returns raw []database.Users (bare array, full model incl.
password_hash — real leak the API emits; pinned + documented; earlier
draft had invented {users,total,limit,offset} wrapper). max-devices
response is {message} only. books/match is GET /api/books/match
{matches, action}. progress history sessions = ReadingHistory rows
(pgtype fields). make test 9/9.

2026-10-24 17:33:32 -04:00

1.4 KiB

Raw Blame History

method, path, auth, area

method	path	auth	area
GET	/api/devices/pending	jwt	devices

List Pending Device Registrations:<|end|><|start|><|start|>assistant to=edit<|channel|>analysis <|constrain|>xml<|message|><rfl:parameter name="path">

/home/nymusicman/Code/bookhoard/docs/developer/api/devices/reject_device_registration.md

List all pending device registration requests.

Endpoint: GET /api/devices/pending Auth: Required (Admin only)

Request Headers

Header	Type	Required	Description
Authorization	string	Yes	Bearer token (must have admin role)

Example Request

GET /api/devices/pending
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

Response (200 OK)

{
  "registrations": [
    {
      "id": "uuid",
      "device_name": "My Kobo",
      "device_type": "kobo",
      "user_email": "user@example.com",
      "created_at": "2026-02-08T10:00:00Z"
    }
  ],
  "total": 3,
  "pending_registrations": null
}

Error Responses

Code	Description
401	Invalid or expired token
403	User does not have admin privileges

1.4 KiB Raw Blame History