hack

Mint a partner link to one event's gallery

Organiser-only (hack:manage plus a live organizer/event_admin role). A grant is a bearer credential to real people's faces, so minting one is a decision a person makes and not something an attendee can do for themselves. The token carries no identity and cannot be revoked individually - subject is recorded IN it so a leaked link can be traced back to who it was minted for, and the TTL is the actual containment (default 14 days, ceiling 90).

post/api/hack/photos/grant

Request

  • Base URL: https://www.immersivecommons.com
  • URL: https://www.immersivecommons.com/api/hack/photos/grant
  • Auth: one of:
    • API key in cookie __session
    • HTTP bearer

Request body

eidstring

Event id. Defaults to the current hackathon.

subjectstring required

Who the link is for. Recorded IN the token so a leaked link can be traced back.

ttl_daysinteger

Default 14, ceiling 90. The TTL is the actual containment — a grant cannot be revoked individually.

Response

The minted link and its expiry.

okboolean required
eidstring required
subjectstring required
expires_atstring date-time required
urlstring required

The gallery link to hand over. It carries the bearer token in its query string.

Changes

No recorded changes to this operation across all 1 revision of this API.