Marc-André Bombeck 365ba8c2eb feat: list the guardians of a managed profile ...

- add GET /api/managed-profiles/{id}/guardians, cookie-only, refusing
  anybody who is not an active guardian of that profile with the same 404
  an unknown id gets
- disclose the grant id, the party block already shared between grant
  parties, the derived state and the two timestamps, and nothing else
- publish the route in the OpenAPI contract

2026-08-07 02:01:21 +02:00

1.3 MiB

Raw Blame History