Backend resource · STATIC DECLARATIONS

Auth API reference · mansoq-ayushma

Static source contract for Auth: 3 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-ayushma at /api/{installed_plugin_prefix}/auth. plugin/local mount; actual prefix and enablement require deployment verification A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method	Path	Action	Evidence
POST	`/api/{installed_plugin_prefix}/auth/register`	register	@action declaration
POST	`/api/{installed_plugin_prefix}/auth/login`	login	@action declaration
DELETE	`/api/{installed_plugin_prefix}/auth/logout`	logout	@action declaration

register · POST

POST /api/{installed_plugin_prefix}/auth/register — action register. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
deployment mount	installed_plugin_prefix	deployment-selected mount prefix	true

serializer: AuthSerializer. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
email	serializers.EmailField	framework default	write_only: true

decorator request: UserCreateSerializer. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
full_name	serializers.CharField	true	required: true
password	serializers.CharField	true	write_only: true; required: true
recaptcha	serializers.CharField	true	write_only: true; required: true

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: AllowAny.

Explicit response statuses in observed code: status.HTTP_201_CREATED. Other branches/framework exception handling may differ.

login · POST

POST /api/{installed_plugin_prefix}/auth/login — action login. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
deployment mount	installed_plugin_prefix	deployment-selected mount prefix	true

serializer: AuthSerializer. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Class policy declarations: permission_classes: AllowAny.

logout · DELETE

DELETE /api/{installed_plugin_prefix}/auth/logout — action logout. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
deployment mount	installed_plugin_prefix	deployment-selected mount prefix	true

serializer: AuthSerializer. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Class policy declarations: permission_classes: AllowAny.

Explicit response statuses in observed code: status.HTTP_204_NO_CONTENT. Other branches/framework exception handling may differ.

Declared refusal/error evidence: ParseError: No auth token provided.

Direct refusal present: the handler/helper contains a top-level raise. Review whether the operation is intentionally disabled or only performs validation before relying on it.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.