From 91d2ac284c8e1ed38d0776f5e350ea41b26f5d74 Mon Sep 17 00:00:00 2001 From: Two <26689496+real2two@users.noreply.github.com> Date: Sat, 27 Dec 2025 18:47:28 -0500 Subject: [PATCH 1/4] feat: POST /api/deauthorize-user --- wings/server.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/wings/server.md b/wings/server.md index 20c7d11..02a2e33 100644 --- a/wings/server.md +++ b/wings/server.md @@ -139,8 +139,31 @@ Sources: - [router/router_server.go#L142](https://github.com/pterodactyl/wings/blob/release/v1.11.2/router/router_server.go#L142) +### `POST /api/deauthorize-user` + +Disconnects user from server websockets and SFTP sessions. + +### Body + +| Field | Visibility | Type | Description | +| -------- | ---------- | --------------- | -------------------------- | +| user | required | string | A user to deny. | +| servers | required | array of string | A list of servers to deny. | + +### Responses + +| Code | Description | +| ---- | ------------------------------------- | +| 204 | The request was successful. | + +Sources: + +- [router/router_system.go#L159](https://github.com/pterodactyl/wings/blob/a97e8ae09fd682057ef229d4940d6dcb0cdaf3af/router/router_system.go#L159) + ### `POST /api/servers/:uuid/ws/deny` +> Deprecated. Use `POST /api/deauthorize-user` instead. + Adds the given JWT IDs (or "jti"s) to the server websocket's deny list, preventing tokens with the JTIs from connecting or interacting with the server websocket. ### Body From ef8561ca7e472bf34a4b0768ed828d2bfa8cabfb Mon Sep 17 00:00:00 2001 From: Two <26689496+real2two@users.noreply.github.com> Date: Sat, 27 Dec 2025 18:47:49 -0500 Subject: [PATCH 2/4] fix: Fixed incorrect response code in POST /api/application/users --- pterodactyl/application/users.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pterodactyl/application/users.md b/pterodactyl/application/users.md index cfc0e47..416fe3d 100644 --- a/pterodactyl/application/users.md +++ b/pterodactyl/application/users.md @@ -157,7 +157,7 @@ Creates a user. | Code | Description | | ---- | ------------------------------------ | -| 200 | The request was successful. | +| 201 | The request was successful. | | 422 | One or more validation rules failed. | ### Sources From a8e5c54aedd98ba89f825389c743eb9809f1345f Mon Sep 17 00:00:00 2001 From: Two <26689496+real2two@users.noreply.github.com> Date: Sun, 28 Dec 2025 12:33:57 -0500 Subject: [PATCH 3/4] fix: fixed incorrect "data" in body (POST /api/remote/backups/:backup) --- pterodactyl/remote/server_backups.md | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/pterodactyl/remote/server_backups.md b/pterodactyl/remote/server_backups.md index c504769..d536055 100644 --- a/pterodactyl/remote/server_backups.md +++ b/pterodactyl/remote/server_backups.md @@ -39,16 +39,15 @@ Handles updating the state of a backup. ### Body -| Name | Visibility | Type | Description | -| ------------------------ | --------------------------- | ------- | ------------------------------------------------------------------------------------------------------ | -| data | required | object | An object containing the checksum, checksum type, backup size, success state, and parts of the backup. | -| data.successful | required | boolean | The success state of the backup. | -| data.checksum | required if success is true | string | The checksum. | -| data.checksum_type | required if success is true | string | The checksum type. | -| data.size | required if success is true | number | The size of the backup. | -| data.parts | optional | array | An array containing the etag and part number for each part. | -| data.parts[].etag | required | string | The entity tag of an upload part. (for S3) | -| data.parts[].part_number | required | number | The part number of an upload part. (for S3) | +| Name | Visibility | Type | Description | +| ------------------- | --------------------------- | ------- | ------------------------------------------------------------- | +| successful | required | boolean | The success state of the backup. | +| checksum | required if success is true | string | The checksum. | +| checksum_type | required if success is true | string | The checksum type. | +| size | required if success is true | number | The size of the backup. | +| parts | optional | array | An array containing the etag and part number for each part. | +| parts[].etag | required | string | The entity tag of an upload part. (for S3) | +| parts[].part_number | required | number | The part number of an upload part. (for S3) | ### Example Body From f36b53ac7cb6c2b5ec930df7e8389e7ea5326289 Mon Sep 17 00:00:00 2001 From: Two <26689496+real2two@users.noreply.github.com> Date: Sun, 28 Dec 2025 12:35:43 -0500 Subject: [PATCH 4/4] feat: include tip for "mounts" (GET /api/remote/servers) --- pterodactyl/remote/servers.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pterodactyl/remote/servers.md b/pterodactyl/remote/servers.md index 4edb49f..177c091 100644 --- a/pterodactyl/remote/servers.md +++ b/pterodactyl/remote/servers.md @@ -159,6 +159,9 @@ Lists all servers with their configurations that are assigned to the requesting } ``` +> [!TIP] +> The `mounts` field can also be defined as an array of objects with the fields `source` (string), `target` (string) and `read_only` (boolean). + ### Sources - [ServerDetailsController.php#L48](https://github.com/pterodactyl/panel/blob/43f7c106172a68f9d81c84af34735373dc900395/app/Http/Controllers/Api/Remote/Servers/ServerDetailsController.php#L48)