Manage group members via the API

[pandark]

I'm trying to create a group for an organization which has it's own oauth/api thing.
I'd like to be able to accept (or invite) members to the group automatically, once they authenticate to an external app using that organization oauth and indicate their inventaire.io username, instead of having to manually accept each one of them.
4 suggested endpoints :

• accept a user in the group
• invite a user in the group (if they are not already in the group) see Invitation from an admin to join a group #121
• change the user role (admin/not admin) in the group
• remove a user from the group

[maxlath]

Most of those endpoints already exist but are not documented on api.inventaire.io yet, (and not that well documented in the code either), I will give it an update in the coming days.

Would that be ok in your use case to authentify those API requests with BasicAuth or cookies (the second one being faster btw) as we don't provide OAuth yet?

[pandark]

Yep. As long as it's hosted on my own server and I am the only one working on the code, it's okayish to have my password in clear 🙂.

The inventaire.io oauth would also ensure the organization member's account is actually theirs, though 🤔
But that's not a concern right now ; I don't think people from the organization will add inventaire.io users other than temselves to the group.

[maxlath]

done!

• accept a user in the group
• invite a user in the group
• change the user role (admin/not admin) in the group
• remove a user from the group

[jum-s]

done and documented nice !