Reference is built from the registered routes on every request — always in sync.
Role & permission management (spatie-backed) plus per-user access readout.
Auth: Bearer token + roles.manage / permissions.manage / users.manage permissions.
| Method | Endpoint | Auth | Route name |
|---|---|---|---|
| GET | auth.wbbx.de/api/v1/admin/permissions | bearer | auth.api.v1.admin.permissions |
| GET | auth.wbbx.de/api/v1/admin/roles | bearer | auth.api.v1.admin.roles |
| GET | auth.wbbx.de/api/v1/admin/users/{id}/access | bearer | auth.api.v1.admin.users.access |
| POST | auth.wbbx.de/api/v1/admin/users/{id}/permissions | bearer | auth.api.v1.admin.users.permissions.grant |
| DELETE | auth.wbbx.de/api/v1/admin/users/{id}/permissions/{permission} | bearer | auth.api.v1.admin.users.permissions.revoke |
| POST | auth.wbbx.de/api/v1/admin/users/{id}/roles | bearer | auth.api.v1.admin.users.roles.assign |
| DELETE | auth.wbbx.de/api/v1/admin/users/{id}/roles/{role} | bearer | auth.api.v1.admin.users.roles.remove |