Create or replace the instance registration policy.
Changed onA full replacement; the caller becomes the authority principal (any edit reassigns it, #579 d4). Reauthentication-gated: proof carries a TOTP code, or the password where no factor is enrolled, consumed in the write transaction. No session is purged. Write-time preconditions refuse 400 naming the failing item in detail: no-public-origin, mailer-unconfigured, provider-disabled, provider-kind-unsupported, provider-missing-email-scope, cap-zero, template-not-org-applicable, with the provider as <kind>:<slug> where one is involved. email is never an allowlist claim.
Request
- Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
- URL: /api/v1/instance/registration-policy
- Auth: HTTP bearer
Request body
Response
The saved policy with its live state.
Changes
- info
added
subschema #1subschema #2to the/request propertyanyOflist - info
added
subschema #1subschema #2to the/response propertyanyOflist for the response status
- info
- info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status
- info