From 2fa1df6cd9f861952b8af50edfcd1578888ad94a Mon Sep 17 00:00:00 2001 From: argszero Date: Mon, 19 Oct 2026 13:36:39 +0800 Subject: [PATCH] docs(architecture): list reset-password in the auth endpoint roster Section 6 groups the auth routes by their shared `POST /api/auth/` prefix and named six of the seven. The missing one is `reset-password`, and it is the half that makes password recovery work at all. Its absence is not a dropped parallel option: `forgot-password` mails a code and `reset-password` is the only place to submit it. The other password route the roster does name, `change-password`, requires a Bearer session and the old password, so it cannot serve anyone who has actually forgotten theirs. A reader building a client from this line gets a flow that stops one step short. Placed directly after `forgot-password` so the send-code and submit-code pair reads adjacently. One entry added; the list stays a functional overview rather than growing into the per-route inventory the section preamble disclaims. --- docs/architecture.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/architecture.md b/docs/architecture.md index 076ba93..ad4ab08 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -79,7 +79,7 @@ > 本表按**功能面**归纳，不是逐条路由的完整清单；权威清单以 `src/routes/mod.rs` 的 `router()` 为准。 - `GET /healthz` — 健康检查（返回版本号） -- `POST /api/auth/register` / `login` / `verify` / `resend-code` / `forgot-password` / `change-password` +- `POST /api/auth/register` / `login` / `verify` / `resend-code` / `forgot-password` / `reset-password` / `change-password` - `GET /api/me` — 当前用户 - `POST/GET/DELETE /api/api-keys` — 分发 key 生成 / 列表 / 撤销 - `GET /api/models` — 模型列表（含可用 key 与价格）