API Reference

The Zoneweaver Frontend API provides comprehensive RESTful endpoints for user management, organization control, and server configuration. This API handles authentication, authorization, and configuration management for the Zoneweaver web interface.

Table of contents

  1. Authentication
  2. Base URL
  3. OpenAPI Specification
    1. Interactive Documentation
    2. API Categories
      1. Authentication & Authorization
      2. User Management
      3. Organization Management
      4. Server Configuration
      5. Settings & Configuration
  4. Rate Limiting
  5. Error Handling
  6. Response Format
  7. Related APIs

Authentication

All API endpoints require authentication using JWT tokens in the Bearer token format:

Authorization: Bearer <jwt_token>

See the Authentication Guide for detailed setup instructions.

Base URL

The API is served from your Zoneweaver frontend server:

  • HTTPS (Recommended): https://your-server:3443
  • HTTP: http://your-server:3443

OpenAPI Specification

The Zoneweaver Frontend API is fully documented using OpenAPI 3.0 specification.

Interactive Documentation

API Categories

The Zoneweaver Frontend API is organized into the following categories:

Authentication & Authorization

  • User registration and login
  • JWT token management
  • Session management
  • Password reset and recovery

User Management

  • User profile management
  • User preferences and settings
  • Account administration
  • Role-based access control

Organization Management

  • Organization creation and configuration
  • Multi-tenant organization support
  • User-organization relationships
  • Invitation management

Server Configuration

  • Zoneweaver API server management
  • Connection configuration and testing
  • Server health monitoring
  • API endpoint management

Settings & Configuration

  • Application settings management
  • Email configuration
  • Security settings
  • System preferences

Rate Limiting

The API currently does not implement rate limiting, but this may be added in future versions for production deployments.

Error Handling

The API uses standard HTTP status codes and returns JSON error responses:

{
  "success": false,
  "message": "Error description"
}

Common status codes:

  • 200 - Success
  • 201 - Created
  • 400 - Bad Request
  • 401 - Unauthorized (Invalid or expired JWT token)
  • 403 - Forbidden (Insufficient permissions)
  • 404 - Not Found
  • 500 - Internal Server Error

Response Format

Successful responses follow this format:

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    // Response data here
  }
}