Skip to content

User API

The endpoints available to a signed-in player, and to anyone holding an API token without administrative scopes. See How the API works for authentication, the response envelope, pagination and errors.

Rendered from /api/openapi.json at NexCTF 0.10.0.

Reading the scope line

Each operation names the token scope it requires. Where it says an API token is not accepted, the endpoint needs a browser session: either because it is part of the sign-in, registration or OAuth flow that issues a session in the first place, or because it changes how an account is secured. See Endpoints a token cannot reach.