Marc-André Bombeck c300574a8e fix(api): read the error code before the status ...

A read-failure primitive decided from the status alone, so a 401 from a
step-up or re-proof gate would have read as an ended session and sent
the reader to sign-in. The code now decides first and the status is the
fallback for codes it does not know.

The two invitation routes answer an unknown name or e-mail with
sharing.invite.no_account. Both have a second 404 with a different next
step, and since every error now carries a code the clients match on it
instead of on the status. The status defaults move into a module the
client can import, and the contract text no longer says these arms
carry no code.

2026-10-20 09:48:15 +02:00

..

fixtures

feat(anamnesis): soft-delete AUDIT-C in its route, admit both AUDIT-C verbs at manage level, and settle the guards

2026-10-16 01:24:56 +02:00

integration

fix(api): read the error code before the status

2026-10-20 09:48:15 +02:00