naftiko: 1.0.0-alpha2
info:
  label: Ready Player Me Auth API — Users
  description: Ready Player Me Auth API operations. Self-contained Naftiko capability covering anonymous user
    creation, email-code login, token refresh, and avatar access tokens.
  tags:
  - Ready Player Me
  - Auth
  - Users
  created: '2026-05-25'
  modified: '2026-05-25'
binds:
- namespace: env
  keys:
    RPM_SUBDOMAIN: RPM_SUBDOMAIN
capability:
  consumes:
  - type: http
    namespace: auth-users
    baseUri: https://${env.RPM_SUBDOMAIN}.readyplayer.me
    description: Ready Player Me Auth API users business capability.
    resources:
    - name: users
      path: /api/users
      operations:
      - name: createanonymoususer
        method: POST
        description: Create an anonymous Ready Player Me user.
    - name: auth-start
      path: /api/auth/start
      operations:
      - name: authstart
        method: POST
        description: Start login by emailing a one-time code.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: auth-login
      path: /api/auth/login
      operations:
      - name: authlogin
        method: POST
        description: Confirm the emailed login code and receive auth tokens.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: auth-refresh
      path: /api/auth/refresh
      operations:
      - name: authrefresh
        method: POST
        description: Refresh the auth token pair.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true
    - name: avatar-token
      path: /v1/auth/token
      operations:
      - name: getavatartoken
        method: POST
        description: Mint a short-lived avatar access token.
        inputParameters:
        - name: body
          in: body
          type: object
          required: true