Skip to content
Upwarden Docs

DELETE /api/v1/admin/orgs/:slug/blocklist/:id

This page is auto-generated from src/admin/routes.ts. Do not edit by hand — see docs/dev/docs-auto-sync.md.

:warning: Heuristic extraction — not a contract. Response shapes below are mined from c.json(...) literals in the handler via an AST walker. Computed fields, ternaries, and non-literal returns are shown as placeholders. Refer to the linked source file for the authoritative behaviour.

DELETE /api/v1/admin/orgs/:slug/blocklist/:id

Section titled “DELETE /api/v1/admin/orgs/:slug/blocklist/:id”

Authentication

Section titled “Authentication”

Requires the following capability(ies):

  • policy:w

Middleware

Section titled “Middleware”

Other middleware observed on this route (heuristic):

  • requireCapability

Description

Section titled “Description”

DELETE /api/v1/admin/orgs/:slug/blocklist/:id — remove one of this org’s custom rows. Refuses to delete a row whose tenant_id doesn’t match the org in the URL — prevents one org’s admin secret being used to delete another org’s rows by guessing IDs. #336 — gated on policy:w (matches blocklist POST + allowlist DELETE).

Responses

Section titled “Responses”

HTTP 404

Section titled “HTTP 404”
{
  "error": "Org not found"
}

HTTP 404

Section titled “HTTP 404”
{
  "error": "Blocklist entry not found for this org"
}

HTTP 200 (default)

Section titled “HTTP 200 (default)”
{
  "deleted": <member-expr>
}

Source

Section titled “Source”
  • File: src/admin/routes.ts
  • Line: 6033