Delete Watch

Delete one of the caller's watches and its event history.

Ownership is checked BEFORE either delete. watch_events carries no owner column, so an unscoped delete ... where watch_id=? removed a guessable other account's event history (an IDOR: the watch row was owner-scoped, the events were not). A watch that is not the caller's is a 404 — the same answer get_watch/check_watch give — and neither table is touched.

delete/api/watch/{watch_id}

Request

  • Base URL: https://www.conceptio.app (the document declares no server; this is the origin it was published from)
  • URL: https://www.conceptio.app/api/watch/{watch_id}
  • Auth: none declared

Path parameters

watch_idinteger required

Headers

authorizationstring nullable
x-license-keystring nullable
x-principalstring nullable
x-api-keystring nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 2 revisions of this API.