prettier: mobile-api-keys tables

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
2026-08-08 10:44:54 +00:00
co-authored by Claude Opus 5
parent 555da9a170
commit 8987898dd7
+7 -3
View File
@@ -80,7 +80,7 @@ answer.
Identical to the JWT in all three places:
| Where | How |
|---|---|
| ---------------------------------------------- | --------------------------------- |
| Normal requests | `Authorization: Bearer ofk_…` |
| Media URLs (`<Image>`, `<Video>`, file `/raw`) | `?token=ofk_…` — URL-encode it |
| WebSockets | `?token=ofk_…` on the upgrade URL |
@@ -126,7 +126,7 @@ will not meet it.
**401 and 403 mean different things and must be handled differently.**
| Status | Meaning | What the app should do |
|---|---|---|
| ------- | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ |
| **401** | The credential is dead — revoked, expired, or never valid. | Clear it, send the user to the login screen. |
| **403** | The credential is **fine**; this account may not reach this feature. | **Do not clear the credential.** Show "not available for your account" and stay signed in. |
@@ -185,7 +185,11 @@ id; there is no request shape that reaches another account's keys.
### `GET /api/api-keys`
```jsonc
{ "keys": [ /* entry objects as above, newest first never the key itself */ ] }
{
"keys": [
/* entry objects as above, newest first never the key itself */
],
}
```
`lastUsedAt` is debounced to at most one write a minute, so it can lag by up to 60 seconds. It is a