APIEndpoint referenceTipster
/tipster/preview/{id}
The tips go with it by cascade.
The tips go with it by cascade. Deleting a preview that is not the caller's is a 200 that removed nothing, because the original does not check the affected row count.
AuthorizationBearer <token>
Supabase access token.
In: header
Path Parameters
id*string
Response Body
application/json
application/json
application/json
curl -X DELETE "https://example.com/api/tipster/preview/string"{ "message": "string"}/tipster/preview/{id} GET
Scoped to the author, so another tipster's draft is a 404 rather than a 403 — the existence of the draft is not disclosed.
/tipster/preview/{id} PUT
Ownership is checked against a row read without an author filter, so a preview belonging to someone else is a 403 rather than a 404 here — unlike GET and DELETE, which scope the lookup.