Feature: Add New Public Events API Endpoints

[ardelato]

Description

This PR adds a token-authenticated public Events API intended for third-party ingestion and display. It allows consumers to fetch approved event data without requiring a user login, keeping events centralized in the platform while enabling external sites/apps to render their own events pages.

CR Notes

We’re shifting direction towards prioritizing organizers/hosts, so creating a separate “public events” page within the app wasn’t the right direction. Instead, we will expose these new endpoints so a separate site (focused on finding/attending repair events) can generate an events page by calling this API.

API Contract

• Auth: Authorization: Bearer <integration_token>

• Endpoints / Query params:

  • GET /events: start, end, updated_start, updated_end, page, per_page

• Removed from the contract:

  • No locale query param
  • No public networks endpoint

Example response (list)

{
  "data": [
    {
      "id": 7,
      "start": "2026-02-25T23:00:00+00:00",
      "end": "2026-02-26T01:00:00+00:00",
      "timezone": "Europe/London",
      "title": "Seed Repair Cafe",
      "location": "London, UK",
      "online": 0,
      "lat": 51.5074,
      "lng": -0.1278,
      "group": {
        "id": 8,
        "name": "Seed Group 1771976789",
        "image": null,
        "location": {
          "location": "London, UK",
          "area": null,
          "postcode": "",
          "country": "United Kingdom",
          "country_code": "GB",
          "lat": "51.5074",
          "lng": "-0.1278"
        },
        "networks": [
          {
            "id": 1,
            "name": "Restarters",
            "logo": null,
            "summary": true
          }
        ],
        "updated_at": "2026-02-24T23:46:29+00:00",
        "archived_at": null,
        "summary": true
      },
      "description": "Seeded event for API testing",
      "updated_at": "2026-02-24T23:46:29+00:00",
      "approved": true,
      "full": true
    }
  ],
  "meta": {
    "page": 1,
    "per_page": 50,
    "total": 1,
    "last_page": 1
  },
  "sync": {
    "generated_at": "2026-02-24T23:46:42+00:00",
    "max_updated_at": "2026-02-24T23:46:29+00:00"
  }
}

QA Notes

This should be tested on the test cluster.

• Requests without a Bearer token return 401
• Requests with a valid Bearer token succeed and return data

[mlahargou]

CR 📱 Scanned it. Looks fine to me.

[mlahargou]

Checks out to me 👍

[ardelato]

QA 👍

• Unauthorized 401 responses when no Bearer token is used
• API endpoints work when the Bearer token is provided.