Information
- License: MIT
- OpenAPI version:
3.0.3
Overview
Financial Tracker API 1.0.0
Section titled “Financial Tracker API 1.0.0”Multi-tenant personal-finance REST API (AWS API Gateway + Lambda + PostgreSQL). All money values are integer minor units (cents). Every 2xx response is wrapped in a { data, requestId, timestamp, message? } envelope; errors use { errorCode, message, fieldErrors?, requestId, timestamp }. Requests are scoped to the caller org via row-level security. Write endpoints accept an optional X-Idempotency-Key header. Every request may carry an optional X-Client-Locale header (KAN-3767): one BCP-47 tag for the device display language (e.g. es-MX, en-US). The server normalizes it to a supported language (en | es), ignores anything else, and records it only at the session-establishing auth endpoints; it never changes a response. This spec is generated by scripts/generate-openapi.js (KAN-240).
Authentication
Section titled “Authentication”bearerAuth
Section titled “bearerAuth”Cognito ID token (RS256). Sent as Authorization: Bearer <idToken>; verified by the Lambda TokenAuthorizer, which reads org/user/role claims. Obtain via /auth/login, /auth/signup, /auth/google, or /auth/refresh.
Security scheme type: http
Bearer format: JWT