Passkey

APIDescription
POST api/passkeys/register/options

No documentation available.

POST api/passkeys/register

No documentation available.

POST api/passkeys/assert/options

No documentation available.

POST api/passkeys/assert

No documentation available.

GET api/passkeys

No documentation available.

DELETE api/passkeys/{passkeyId}

No documentation available.

World

Test endpoints for API functionality verification.

APIDescription
GET api/world/earth

Test endpoint that returns a simple message. No authentication required.

GET api/world/mars

Test endpoint that returns a simple message. Requires JWT authentication.

Address

Endpoints for address resolution using GetAddress.io service. Requires JWT authentication.

APIDescription
GET api/address/autocomplete?query={query}

Gets address autocomplete suggestions based on a search query.

GET api/address/get/{id}

Gets full address details for a specific address ID (from autocomplete suggestion).

Auth

Endpoints for user authentication, registration, and session management.

APIDescription
POST api/auth/register

Registers a new user account with email OTP verification.

POST api/auth/reaccept-legal

Re-accept current application terms and privacy policy after an update (authenticated).

POST api/auth/verify-email

Verifies a user's email address using a verification token sent to their email.

POST api/auth/resend-verification

Sends a new email verification code for an unverified account. Always returns success to prevent email enumeration.

POST api/auth/login/request-otp

Sends a sign-in OTP to a verified account, or a verification OTP if the account is not yet verified. Always returns success to prevent email enumeration.

POST api/auth/login

Authenticates a user with email and OTP sign-in code.

POST api/auth/login/social

Authenticates a user using social login providers (e.g., Google, Facebook).

GET api/auth/social-config

Returns public OAuth client identifiers for configured social login providers. Secrets are never included. Use this to initialize Google, Apple, or Facebook SDKs in clients.

POST api/auth/refresh-token

Refreshes an access token using a refresh token.

POST api/auth/revoke-token

Revokes a refresh token, preventing it from being used to obtain new access tokens.

Vehicle

APIDescription
GET api/user/vehicles

No documentation available.

GET api/user/vehicles/{vehicleId}

No documentation available.

POST api/user/vehicles

No documentation available.

PUT api/user/vehicles/{vehicleId}

No documentation available.

DELETE api/user/vehicles/{vehicleId}

No documentation available.

User

Endpoints for managing user profile information and account settings.

APIDescription
GET api/user/profile

Retrieves the current authenticated user's profile information.

PUT api/user/profile

Updates the current authenticated user's profile information. Email cannot be changed.

GET api/user/detail

Retrieves booking-ready customer details for the current authenticated user.

PUT api/user/detail

Creates or updates booking-ready customer details for the current authenticated user.

Public read of published legal documents and authenticated terms-acceptance status.

APIDescription
GET api/legal/current?websiteId={websiteId}&documentTypeId={documentTypeId}

Returns the current published document version and blocks for the given website and document type.

GET api/legal/TermsConditionsStatus?websiteId={websiteId}

Returns the JWT caller's accepted application-terms version number and whether they must accept the latest published terms.

Status

Endpoints for retrieving system status and configuration information. Refactored to use service layer with dependency injection.

APIDescription
GET api/Status

Returns current system status including booking availability, call center hours, and maintenance warnings.