41 lines (31 loc) · 1.17 KB

Control Plane API

Production foundation service for Luxia platform governance.

What it provides

Client registration + admin approval workflow
Client/room lifecycle APIs and credential rotation
Socket authorization endpoint for room ownership and RBAC checks
Admin system overview, config allowlist updates, domain trust actions
Immutable audit log trail

Dev auth tokens

For local dev, bearer tokens are static and configured in app/core/config.py:

admin-token => platform_admin
client-admin-token => client_admin (client_demo)
client-operator-token => client_operator (client_demo)

Run

uvicorn app.main:app --host 0.0.0.0 --port 8010

Key endpoints

POST /v1/client-registrations
POST /v1/client-registrations/{id}/approve
GET /v1/admin/client-registrations/pending
GET /v1/admin/system-overview
GET /v1/admin/config
PATCH /v1/admin/config
POST /v1/admin/domain-trust/{domain}/approve
POST /v1/admin/domain-trust/{domain}/reject
GET /v1/admin/audit-logs
GET /v1/client/rooms
POST /v1/client/rooms
POST /v1/client/rooms/{room_id}/credentials/rotate
POST /v1/socket/authorize