This section lists all available API endpoints, organized by controllers.
Auth Endpoints
| Method | Path | Description | Auth Required | Role Required | | GET | /api/auth/session | Verifies the user's JWT session | No, but will fail if no user cookies present. | None |
| GET | /api/auth/refresh | Rotates and issues new tokens | No, but will fail if no user cookies present. | None |
Boss Endpoints
| Method | Path | Description | Auth Required | Role Required | | GET | /api/boss/:id | Get all bosses for a world | Yes | None |
| PATCH | /api/boss/:id | Update killed state for a boss | Yes | Owner, Admin, Sub Admin |
Event Endpoints
| Method | Path | Description | Auth Required | Role Required | | POST | /api/event/:id | Create an event for the user's world | Yes | None |
| POST | /api/event/join/:id | Allows user to join a world event | Yes | None |
| GET | /api/event/:id | Gets all events for a world | Yes | None |
| DELETE | /api/event/:id | Deletes an event | Yes | None |
Note Endpoints
| Method | Path | Description | Auth Required | Role Required | | POST | /api/note/:id | Creates a note for a world | Yes | None |
| GET | /api/note/:id | All notes for a world | Yes | None |
| DELETE | /api/note/:id | Deletes a note from a world | Yes | Owner, Admin, Sub Admin |
User Endpoints
| Method | Path | Description | Auth Required | Role Required | | POST | /api/user/signup | Register a new user | No | None |
| POST | /api/user/signin | Sign in and receive JWT and refresh tokens via httpOnly cookies | No | None |
| POST | /api/user/signout | Sign out user | Yes | None |
| GET | /api/user/fetchUserById | Get user information by their id | Yes | None |
World Endpoints
| Method | Path | Description | Auth Required | Role Required | | POST | /api/world/create | Creates a world | Yes | None |
| POST | /api/world/join | Joins a world | Yes | None |
| GET | /api/world/ | Gets all worlds a user is a part of | Yes | None |
| GET | /api/world/adminData/:id | Get admin data for a world | Yes | Owner, Admin, Sub Admin |
| PATCH | /api/world/:id | Update data for a world | Yes | Owner |
World Membership Endpoints
| Method | Path | Description | Auth Required | Role Required | | GET | /api/membership/all/:id | All members in a world | Yes | None |
| GET | /api/membership/:id | Membership role in a world | Yes | None |
| PATCH | /api/membership/:id | Update membership for someone in a world | Yes | Owner |
Tip:
For details, parameters, and examples, see the controller and routes documentation for each section.