Customers

Rotate the public cost-dashboard token (ADR-032)

Changed on

Mints a fresh vlx_pcd_… token and writes it to the customer row. The previous token is invalidated immediately (read-only public surface; no grace window). The plaintext token is the sole credential for GET /v1/public/cost-dashboard/{token} and is shown ONCE — Velox never returns it again after this response. Audit log records the rotation without the token.

post/v1/customers/{id}/rotate-cost-dashboard-token

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/customers/{id}/rotate-cost-dashboard-token
  • Auth: HTTP bearer

Path parameters

idstring required

Response

Rotated

tokenstring required
public_urlstring required

Example response

{
  "token": "vlx_pcd_a3f9c4...",
  "public_url": "https://api.example.com/v1/public/cost-dashboard/vlx_pcd_a3f9c4..."
}

Changes