watchlist

Get Watchlist Note

Return the caller's private note for a symbol; note: null if none exists.

RLS (auth.uid() = user_id) is the primary isolation boundary. This query ALSO carries an explicit user_id=eq.{caller} filter as defense-in-depth (T-89-11-01) — the service-role key used by _supabase_headers() bypasses RLS, so the router-level filter is what actually scopes this query today.

get/api/watchlist/{symbol}/note

Request

  • Base URL: https://api.equity-rank.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.equity-rank.com/api/watchlist/{symbol}/note
  • Auth: HTTP bearer

Path parameters

symbolstring required

Response

Successful Response

object required

Changes

No recorded changes to this operation across all 2 revisions of this API.