instant-match-calls
instant-match-calls

Save Instant Match Transcript

Save transcript entry for an instant match session.

🔒 Had no participant check at all — anyone who knew a match_session_id could inject fabricated transcript lines (attributed to any user_id they chose) into another pair's call, or bootstrap-convert one they had no part in. Authorization is on the WRITER (the token), never on the client- supplied user_id — same as call_routes.update_call_transcript, which the client also legitimately uses to write REMOTE entries attributed to the other participant.

put/instant-match/sessions/{match_session_id}/transcript

Request

  • Base URL
    https://api.fluentea.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.fluentea.com/instant-match/sessions/{match_session_id}/transcript
  • Auth
    none declared

Path parameters

match_session_idstring required

Query parameters

user_idstring required

Headers

authorizationstring nullable

Request body

contentstring required
confidencenumber
speaker_idstring nullable
speaker_namestring nullable
is_remoteboolean

Response

Successful Response

unknown required

Changes

No operation changes recorded.