API overview
JSON APIs use verified sessions, problem responses, bounded payloads, and idempotency keys for mutations.
Documentation
Build with Rodstark Academy
Versioned API conventions, authentication boundaries, rate and idempotency guidance, and machine-readable OpenAPI.
Original English editorial content
Authentication
Private APIs require a verified Supabase session. Service credentials never enter browser bundles.
Offline architecture
Only explicitly selected public lesson resources may be cached; protected and private routes are network-only.