enricobuehler 6753641c5e feat(mgmt): access on the wire of record — grants in the payloads, and PATCH to change them ...

The management API is where grants become operable (WP6): the paired-client and
pending-device payloads carry grants/expiry/grant-time plus a derived
access_level preset name, the approve and arm requests take an optional access
choice (expiry RELATIVE in the API, stored absolute), and a new
PATCH /native/clients/{fingerprint} does partial access edits — omitted halves
keep their current value, clear_expiry makes access permanent. Reserved grant
bits are a 400, never silently cleared.

2026-08-15 10:00:21 +02:00

285 KiB

Raw Blame History