Paradaux
Issues
Open ↗

PAR-39

0

Endpoint to get own identity/information akin to /firms/me

DoneNormalrianTreasury APIFeature

Add a "who am I" endpoint so an API caller can fetch their own identity/scope, akin to /firms/me.

Technical notes — The authenticated principal treasury-rest-api/…/security/VerifiedToken already carries everything needed: ownerUuid, keyType (PERSONAL/BUSINESS/GOVERNMENT), scoped accountId/firmId, and keyId (injected via @AuthenticationPrincipal). AuthController only exposes POST /rotate. Add GET /api/v1/auth/me (or /api/v1/me) returning a thin DTO over the injected VerifiedToken — no new auth plumbing.

Resources

Comments

tesks · Jun 4, 2026, 9:24 AM

Code context — The authenticated principal treasury-rest-api/…/security/VerifiedToken already carries everything a "who am I" response needs: ownerUuid, keyType (PERSONAL/BUSINESS/GOVERNMENT), scoped accountId/firmId, and keyId — injected via @AuthenticationPrincipal. But AuthController only exposes POST /rotate.

Fix: add GET /api/v1/auth/me (or /api/v1/me) returning a thin DTO over the injected VerifiedToken — no new auth plumbing, parallel to the existing /firms/me.

tesks · Jun 4, 2026, 9:19 PM

Verified state (Planned is correct — not done): only firm-scoped endpoints exist (/firms/me, /me/accounts, /me/employees, /me/roles in FirmController). The requested generic identity endpoint — GET /api/v1/auth/me returning a thin DTO over VerifiedToken (owner/keyType/accountId/firmId) — does not exist; AuthController still only exposes POST /rotate. Genuinely open.

Activity

  • ParadauxIO linked a commit — Commit f5c76e2 — Release treasury-rest-api 2.1.0 (PAR-39, PAR-102, PAR-116)
  • ParadauxIO linked a commit — Commit 9a61b50 — Add GET /api/v1/auth/me identity endpoint (PAR-39)
  • ParadauxIO changed status to Status → Done
  • ParadauxIO linked a pull request — PR #11 merged — Release: develop → main
  • ParadauxIO linked a pull request — PR #11 open — Release: develop → main
  • ParadauxIO linked a commit — Commit f5c76e2 — Release treasury-rest-api 2.1.0 (PAR-39, PAR-102, PAR-116)
  • ParadauxIO linked a pull request — PR #11 open — Release: develop → main
  • ParadauxIO linked a pull request — PR #11 open — Release: develop → main
  • ParadauxIO linked a pull request — PR #11 open — Release: develop → main
  • tesks changed status to Status → Pending Release
  • ParadauxIO linked a commit — Commit 9a61b50 — Add GET /api/v1/auth/me identity endpoint (PAR-39)
  • tesks changed status to Status → In Progress
  • tesks commented
  • tesks description: Description updated
  • tesks commented
  • tesks assigned Assigned to rian
  • tesks set priority to Priority → Normal