SkyMoney/docs/api-phase1-move-log.md

API Phase 1 Move Log

Date: 2026-03-15
Scope: Move low-risk endpoints out of api/src/server.ts into dedicated route modules.

Route Registration Changes

• Registered session routes in server.ts
• Registered user routes in server.ts
• Registered health routes in server.ts

Endpoint Movements

1. GET /health

• Moved to health.ts
• References:
  • HealthPage.tsx
  • security-misconfiguration.test.ts

2. GET /health/db (non-production only)

• Moved to health.ts
• References:
  • HealthPage.tsx

3. GET /auth/session

• Moved to session.ts
• References:
  • useAuthSession.ts
  • auth.routes.test.ts

4. POST /app/update-notice/ack

• Moved to session.ts
• References:
  • App.tsx

5. PATCH /me

• Moved to user.ts
• References:
  • OnboardingPage.tsx
  • AccountSettings.tsx

6. PATCH /me/password

• Moved to user.ts
• References:
  • AccountSettings.tsx
  • identification-auth-failures.test.ts

7. PATCH /me/income-frequency

• Moved to user.ts
• References:
  • Currently no frontend direct calls found by static search.

8. PATCH /user/config

• Moved to user.ts
• References:
  • OnboardingPage.tsx
  • AccountSettings.tsx

Notes

• server.ts endpoint blocks for the above routes were removed to prevent duplicate registration.
• Existing path contracts were preserved (same method + path).
• openPaths and auth/CSRF hook behavior remain unchanged.