API Planning (serveur de ressources OAuth 2.0)
- Lire
GET https://planning.lab-b3.sabathe.eu/api/creneaux — portée planning:read
- Modifier
PUT https://planning.lab-b3.sabathe.eu/api/creneaux/c1 corps {"qui":"Équipe rouge"} — portée planning:write, acr=urn:aeronova:loa:2, authentification de moins de 300 s
- Audience attendue
https://planning.lab-b3.sabathe.eu/api
- Émetteur de confiance
https://hub.lab-b3.sabathe.eu
- Refus
401 invalid_token (signature, audience, expiration), 403 insufficient_scope, 401 insufficient_user_authentication + acr_values et max_age (RFC 9470)
curl -i -H "Authorization: Bearer $AT" https://planning.lab-b3.sabathe.eu/api/creneaux