REST — /api/profile
5 route handlers under /api/profile · 5 public (auth-optional).
Public flags are cross-referenced against
PUBLIC_API_PREFIXESinsrc/lib/route-access.ts. Routes without a public prefix require an authenticated session (or, where applicable, a signed federation request). See Auth models.
| Route | Methods | Access | Description |
|---|---|---|---|
/api/profile/[username] | GET | Public | Unified session accepts NextAuth JWT or federated rivr_remote_viewer (#105). |
/api/profile/[username]/chat | GET POST | Public | POST /api/profile/[username]/chat |
/api/profile/[username]/manifest | GET | Public | Resolve the target person so we can apply THEIR per-tab visibility model. |
/api/profile/sovereign-merge/callback | GET | Public | Sovereign-merge callback. |
/api/profile/sovereign-merge/migrate | POST | Public | Sovereign-merge content migration. |