Status

Waiting…

WS endpoint: same host/port, path: /socket.io
Auth: accessToken w handshake:
  - socket.handshake.auth.token = "<JWT>"
  - albo query ?token=<JWT>
Room: device:<deviceId>
Minimal events:
  - client -> "ping"
  - server -> "pong"
Server log: "[WS] Connected userId=... deviceId=..."
        

Body JSON:
{
  "password": "min 8 chars",
  "username": "optional, 3..64, [a-zA-Z0-9_.]",
  "fullName": "optional, max 128",
  "deviceId": "optional 16-hex; jeśli brak -> server generuje",
  "platform": "ios|android|desktop|web|unknown",
  "deviceLabel": "optional, max 128"
}

201 Response:
{
  "userId": 1,
  "convroNumber": "+99xxxxxx",
  "username": "sigmabo" | null,
  "fullName": "..." | null,
  "deviceId": "16hex",
  "platform": "ios",
  "accessToken": "<JWT>",
  "refreshToken": "rt_<jti>_<secretB64url>"
}

Errors:
- 400 PASSWORD_TOO_SHORT / INVALID_USERNAME / INVALID_DEVICE_ID
- 409 USERNAME_TAKEN / DEVICE_ID_TAKEN
- 500 FAILED_TO_ALLOCATE_CONVRO_NUMBER / INTERNAL_ERROR
        

Body JSON:
{
  "password": "...",
  "username": "..." | null,
  "convroNumber": "+99xxxxxx" | null,
  "deviceId": "optional 16-hex",
  "platform": "ios|android|desktop|web|unknown",
  "deviceLabel": "optional"
}

200 Response:
{ same shape as /register }

Errors:
- 400 MISSING_LOGIN_IDENTIFIER / INVALID_DEVICE_ID
- 401 INVALID_CREDENTIALS
- 403 DEVICE_OWNED_BY_OTHER_USER
        

Body JSON:
{ "refreshToken": "rt_..." }

200 Response:
{
  "userId": 1,
  "deviceId": "16hex",
  "convroNumber": "+99xxxxxx",
  "username": "..." | null,
  "accessToken": "<JWT>",
  "refreshToken": "rt_..."  // nowy, stary revoke
}

Errors:
- 400 INVALID_REFRESH_TOKEN
- 401 REFRESH_NOT_FOUND / REFRESH_REVOKED / REFRESH_EXPIRED / REFRESH_INVALID
        

Header:
Authorization: Bearer <accessToken>

Body JSON (jedna z opcji):
1) revoke single:
{ "refreshToken": "rt_..." }

2) revoke all for device (default gdy brak refreshToken):
{ "allForDevice": true }

3) revoke all for user (wszystkie device):
{ "allForUser": true }

200 Response:
{ "ok": true, "scope": "single|device|user" }
        

200 Response:
{
  "userId": 1,
  "deviceId": "16hex",
  "convroNumber": "+99xxxxxx",
  "username": "..." | null
}
        

Cel: start DM po +99 / username (UI: wpisujesz numer -> dostajesz peerUserId).

Header:
Authorization: Bearer <accessToken>

Query (jedno z):
- ?convroNumber=+99xxxxxx
- ?username=sigmabo

200 Response (minimal):
{
  "userId": 123,
  "convroNumber": "+99xxxxxx",
  "username": "..." | null,
  "fullName": "..." | null
}

Errors:
- 400 INVALID_QUERY
- 404 USER_NOT_FOUND
        

Header:
Authorization: Bearer <accessToken>

Body JSON:
{
  "identity": { "publicKeyEd25519": "<base64 32B>", "fingerprint": "optional" },
  "signedPrekey": {
    "keyId": "<16hex>",
    "publicKeyX25519": "<base64 32B>",
    "signatureEd25519": "<base64 64B>"
  },
  "oneTimePrekeys": [
    { "keyId": "<16hex>", "publicKeyX25519": "<base64 32B>" }
  ]
}

200 Response:
{ "ok": true, "deviceId": "16hex", "storedOneTimePrekeys": 0..N }

Notes:
- identity i signedPrekey są wymagane
- OTP batch opcjonalny (ale zalecany)
        

Header:
Authorization: Bearer <accessToken>

Query:
- user_id (required) => peer userId
- device_id (optional) => 16hex peer deviceId

200 Response:
{
  "responderDeviceId": "16hex",
  "identityPublicKeyEd25519": "<base64 32B>",
  "signedPrekeyId": "<16hex>",
  "signedPrekeyPublicKeyX25519": "<base64 32B>",
  "signedPrekeySignature": "<base64 64B>",
  "oneTimePrekeyId": "<16hex>" | null,
  "oneTimePrekeyPublicKeyX25519": "<base64 32B>" | null
}

Canonical:
- OTP jest konsumowany tutaj (atomowo), nie w DM session.
        

Header:
Authorization: Bearer <accessToken>

Body JSON:
{
  "peerUserId": 123,
  "handshakeOffer": {
    "version": 1,
    "initiatorDeviceId": "16hex (musi == deviceId z JWT)",
    "responderDeviceId": "16hex",
    "sessionId": "8hex",
    "ephemeralPublicKeyX25519": "<base64url/base64 32B>",
    "usedSignedPrekeyPublicKeyX25519": "<base64url/base64 32B>",
    "usedOneTimePrekeyId": "<16hex>" | null,

    "...": "inne pola offer zależne od C6P v1"
  }
}

201 Response:
{ "ok": true, "sessionDbId": 1, "sessionId": "8hex", "responderUserId": 123, "responderDeviceId": "16hex", "state": "PENDING" }

Errors:
- 409 SESSION_ID_EXISTS
- 404 INITIATOR_DEVICE_NOT_FOUND / RESPONDER_DEVICE_NOT_FOUND
- 413 HANDSHAKE_OFFER_TOO_LARGE
        

Header:
Authorization: Bearer <accessToken>

200 Response:
{
  "sessions": [
    {
      "sessionDbId": 1,
      "sessionId": "8hex",
      "initiatorUserId": 55,
      "initiatorDeviceId": "16hex",
      "handshakeOffer": { ... },
      "createdAt": "ISO"
    }
  ]
}
        

Header:
Authorization: Bearer <accessToken>

Body JSON:
{ "sessionDbId": 1 }

200 Response:
{ "ok": true, "sessionDbId": 1, "sessionId": "8hex", "state": "ACTIVE" }

Notes:
- akceptuje tylko responder device z sesji
        

Header:
Authorization: Bearer <accessToken>

Body JSON (canonical minimum):
{
  "sessionId": "8hex",
  "recipientDeviceId": "16hex",
  "clientMessageId": "optional string up to 64",
  "clientTimestamp": "optional ISO",
  "ciphertext": "<base64>",
  "authTag": "<base64 (16B)>"
}

201/200 Response (typowo):
{
  "ok": true,
  "messageId": 123,
  "serverTimestamp": "ISO",
  "deliveryState": "PENDING"
}

Realtime:
- server emituje do room: device:<recipientDeviceId> (payload z message/meta)
        

Header:
Authorization: Bearer <accessToken>

Query (typowo):
- ?sessionId=8hex
- ?beforeId=123 (optional) / ?limit=50 (optional)

200 Response:
{ "messages": [ ... ] }
        

Header:
Authorization: Bearer <accessToken>

200 Response:
{ "conversations": [ ... ] }
        

Header:
Authorization: Bearer <accessToken>

Body JSON:
{
  "messageId": 123,
  "status": "DELIVERED" | "READ"
}

200 Response:
{ "ok": true }

Notes:
- tylko recipient device może wystawić receipt
- DB: message_receipts ma uniq(message_id, device_id)