Information
- OpenAPI version:
3.1.0
Contract for the Personal Page and Role Page (People area). Authored by Claude as the handoff artifact to the external API team. This single file drives: (1) the external team’s implementation target, (2) Gospl’s generated frontend client types, (3) a mock server for parallel frontend build, (4) the auto-rendered wiki API page.
Traceability: every operation lists the spec FR IDs it satisfies in x-gospl-frs. Contract tests are tagged by these IDs.
OWNERSHIP NOTE (pre-build dependency, see docs/operating-model.md): whether tenancy + permission filtering is enforced by Gospl RLS or by the external team’s implementation is TBD. Either way it is a REQUIREMENT of this contract and verified by contract test.
Token carries tenant + viewer identity. Auth/SSO approach is a pre-build dependency (docs/operating-model.md). All endpoints are tenant-scoped; cross-tenant access MUST be impossible.
Security scheme type: http
Bearer format: JWT