Lists every permission this version has.

GET

/api/v1/admin/permissions

401 when nothing was signed in, 403 when the caller may not read roles or used a bearer token, 404 when this instance has no administration.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Every permission this version has

application/json

[index: integer]?

Every permission this version has, so a screen can offer them.

Sent, not hard-coded in the client, which would stop offering any permission added since it was built and leave no way to grant them.

curl -X GET 'https://example.com/api/v1/admin/permissions'

[  {    "name": "string",    "privileged": true  }]