Settings

Settings page payload (used by /settings).

<br/>Identity comes from current_user() (the auth gate's resolved user,<br/>which is the TARGET while impersonating), never from the Flask<br/>session: the session read ignored Bearer-JWT callers and leaked the<br/>ADMIN's settings into an impersonated view (spec §3.7, 2026-08-11).

get/api/v1/settings

Request

  • Base URL: https://api.avatarfactory.io (the document declares no server; this is the origin it was published from)
  • URL: https://api.avatarfactory.io/api/v1/settings
  • Auth: one of:
    • API key in cookie session
    • HTTP bearer

Response

OK

resolved_imageunknown
resolved_writingunknown
user_idinteger nullable

Changes

No recorded changes to this operation across all 1 revision of this API.