Skip to content

docs(api): TRA-791 BB68 — Authentication scope table + 401 detail strings + design-notes bodySerializer cross-link#184

Merged
mikestankavich merged 1 commit into
mainfrom
docs/tra-791-bb68
May 19, 2026
Merged

docs(api): TRA-791 BB68 — Authentication scope table + 401 detail strings + design-notes bodySerializer cross-link#184
mikestankavich merged 1 commit into
mainfrom
docs/tra-791-bb68

Conversation

@mikestankavich
Copy link
Copy Markdown
Contributor

Summary

Docs-side of TRA-791 (BB68). Three customer-facing reference-page corrections; no runtime behavior changes; no changelog. Platform-side (F4) is closed per the audit comment — the spec already carries x-required-scopes on every operation.

  • F1 — Authentication scope table. Added the four tag-subresource ops (POST/DELETE on assets/{id}/tags and locations/{id}/tags) under the appropriate :write scopes. Added an inheritance-rule bullet ("tag ops gate on the parent's :write scope — no separate tags:* scope"). Added a canonical-source note above the table pointing readers at the x-required-scopes extension as the authoritative mapping.
  • F2 — 401 detail strings. New subsection under Request header documenting all three runtime error.detail strings (missing header / invalid or expired token / wrong scheme) with guidance to branch on error.type rather than the diagnostic prose.
  • F3 — design-notes cross-link. Added a "Pairing with openapi-fetch?" pointer at the end of the nullable section in design-notes that links to the mergePatchMiddleware recipe in the quickstart, closing the discoverability follow-on from TRA-787 F2. Sweep audit: http-method-coverage.md already cross-links the recipe; other PATCH mentions are generic contract statements, not stack-specific.

Test plan

  • pnpm build clean (no broken links or render errors)
  • pnpm typecheck clean
  • pnpm dlx prettier --write applied to edited files
  • Render /docs/api/authentication on preview — tag rows visible under assets:write / locations:write; inheritance bullet present; canonical-source note above the table; 401 detail table renders cleanly
  • Render /docs/api/design-notes on preview — bodySerializer cross-link resolves to /docs/api/quickstart#openapi-fetch

🤖 Generated with Claude Code

…ings + design-notes bodySerializer cross-link

F1: Add tag-subresource rows (POST/DELETE on assets/{id}/tags and
locations/{id}/tags) under the appropriate :write scopes, plus an
inheritance-rule bullet stating tag ops gate on the parent resource's
:write scope. Add a canonical-source note above the table pointing
readers at the x-required-scopes extension.

F2: Document all three 401 error.detail strings (missing header,
invalid/expired token, wrong scheme) in a new subsection under
Request header, with guidance to branch on error.type rather than
the diagnostic detail prose.

F3: Add a See-also pointer from the design-notes nullable section to
the openapi-fetch mergePatchMiddleware recipe in the quickstart, so
readers landing in design-notes for stack gotchas find the PATCH
Content-Type fix in one hop.
@github-actions
Copy link
Copy Markdown

🚀 Preview Deployment Update

✅ This PR has been successfully merged into the preview branch.

The preview environment will update shortly at: https://docs.preview.trakrf.id

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented May 19, 2026

Deploying docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: ba4b808
Status: ✅  Deploy successful!
Preview URL: https://3a664933.docs-4n7.pages.dev
Branch Preview URL: https://preview.docs-4n7.pages.dev

View logs

@mikestankavich mikestankavich merged commit 2277c3e into main May 19, 2026
2 checks passed
@mikestankavich mikestankavich deleted the docs/tra-791-bb68 branch May 19, 2026 01:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant