You’re viewing Paradaux’s public workspaceSign in to vote and comment Get taskl.ie for your team

PAR-39

Loading issues

PAR-39 · Endpoint to get own identity/information akin to /firms/me · Paradaux · taskl.ie

PAR-39

Endpoint to get own identity/information akin to /firms/me

Add a "who am I" endpoint so an API caller can fetch their own identity/scope, akin to /firms/me.

Technical notes — The authenticated principal treasury-rest-api/…/security/VerifiedToken already carries everything needed: ownerUuid, keyType (PERSONAL/BUSINESS/GOVERNMENT), scoped accountId/firmId, and keyId (injected via @AuthenticationPrincipal). AuthController only exposes POST /rotate. Add GET /api/v1/auth/me (or /api/v1/me) returning a thin DTO over the injected VerifiedToken — no new auth plumbing.

Activity

tesks assigned the issue to rian Jun 4
tesks set priority to Normal Jun 4
tesksJun 4
Code context — The authenticated principal treasury-rest-api/…/security/VerifiedToken already carries everything a "who am I" response needs: ownerUuid, keyType (PERSONAL/BUSINESS/GOVERNMENT), scoped accountId/firmId, and keyId — injected via @AuthenticationPrincipal. But AuthController only exposes POST /rotate.

Fix: add GET /api/v1/auth/me (or /api/v1/me) returning a thin DTO over the injected VerifiedToken — no new auth plumbing, parallel to the existing /firms/me.
tesks edited the description Jun 4
tesksJun 4
Verified state (Planned is correct — not done): only firm-scoped endpoints exist (/firms/me, /me/accounts, /me/employees, /me/roles in FirmController). The requested generic identity endpoint — GET /api/v1/auth/me returning a thin DTO over VerifiedToken (owner/keyType/accountId/firmId) — does not exist; AuthController still only exposes POST /rotate. Genuinely open.
tesks set status to In Progress Jun 5
ParadauxIO linked a commit: Commit 9a61b50 — Add GET /api/v1/auth/me identity endpoint (PAR-39) Jun 5

Sign in to comment

Join the conversation, react to comments and vote on this issue.