Patch notes — company API tab example (2026-06-15, commit `08b17fb`)
A small UI-copy fix to the per-company API tab shipped in
5107579. On main,
Docker smoke 116 / 0.
Change
The API tab’s usage example showed the header form:
curl -H "X-Company-Token: <token>" http://<host>/api/company
It now shows the simpler, copy-pasteable query-string form, with the company’s live token filled in (the token already appears in the read-only field directly above):
/api/company?company_token=<token>
- This is display only — the
X-Company-Tokenheader still works exactly as before; nothing changed about the endpoint, auth, or scoping. - The token is already exposed in the field above, so embedding it in the example URL adds no new disclosure.
Verification
py_compile clean · Docker smoke 116 / 0 (unchanged — the suite exercises the
endpoint via the header and the query string independently of the displayed hint).