api-endpoints

name	api-endpoints
description	Reference for all onepixel API endpoints, their HTTP methods, paths, auth requirements, and behavior.

API Endpoints Skill

Use this skill when adding, modifying, or debugging API routes, middleware, or authentication logic.

Authentication types

Four auth middleware are defined in src/security/middlewares.go:

• MandatoryAdminApiKeyAuthMiddleware – requires X-API-Key header matching config.AdminApiKey. Sets admin=true in Fiber locals.
• OptionalAdminApiKeyAuthMiddleware – same check, but proceeds without error if header is absent.
• MandatoryJwtAuthMiddleware – requires Authorization: Bearer <token>. Stores decoded *models.User in Fiber locals.
• OptionalJwtAuthMiddleware – same check, but proceeds without error if header is absent.

Users endpoints (/api/v1/users)

Source: src/routes/api/users.go

Method	Path	Auth	Description
POST	/users	X-API-Key (required)	Register a new user. Returns JWT token. 409 if email exists.
POST	/users/login	None	Login with email/password. Returns JWT token. 401 if invalid.
GET	/users/{userid}	JWT (required)