Add REST API v1 for external PAT clients - #19

Merged

maxijabase merged 27 commits into

mainfrom

feat/rest-api-v1

Sep 7, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

isolate REST CSRF skip from the phpunit process
maxijabase
committed
ea648fd

Commits on Sep 3, 2026

fix(rest): skip panel cookie JWT under SBPP_REST
maxijabase
committed
5757ec9
fix(rest): log REST admin create and update
maxijabase
committed
e0f99e1
fix(rest): 404 anonymous comm comments when comms are off
maxijabase
committed
a36172b
fix(rest): prune stale rate-limit files
maxijabase
committed
790fefd
fix(account): require password to mint PAT, revoke on password change
maxijabase
committed
d01e8e8
fix(rest): return insert ids from mods.add and comms.add
maxijabase
committed
7a9651e
docs(rest-api): split PATH_INFO in the nginx snippet
maxijabase
committed
38ce132
fix(rest): capture mods.add insert id before the audit log
maxijabase
committed
af38b22

Commits on Sep 5, 2026

fix(rest): add Coerce helper and cheap contract nits
maxijabase
committed
f4e773a
perf(rest): batch admin server_ids and server group_ids
maxijabase
committed
2a65056
fix(rest): return GET length in minutes
maxijabase
committed
c0e86c4
fix(rest): let only author or Owner edit comments
maxijabase
committed
fc7fc16
feat(rest): archive and restore protests and submissions
maxijabase
committed
7280a4b
fix(rest): paginate GET /groups
maxijabase
committed
6527c40
fix(rest): validate settings PATCH values
maxijabase
committed
8ed25f2
fix(account): live-insert PAT rows on Your Account
maxijabase
committed
3d3c80c
docs(rest-api): document review polish and pin OpenAPI parity
maxijabase
committed
4d084c3

Commits on Sep 6, 2026