Rest API
API Routes
7/15/2026
Comprehensive list of REST API endpoints for the Mobile App Boilerplate.
Canonical Routing
| Owner | Endpoint Prefix / Route | Notes |
|---|---|---|
| Laravel | /api/v1/auth/* | Auth, connected accounts, and destructive security operations |
| Laravel | /api/v1/uploads | File uploads |
| Laravel | /api/v1/webhooks/revenuecat | RevenueCat webhook |
| Shared | /api/v1/app/* | Mobile app resource contract implemented by both Laravel compatibility mode and Go performance mode |
Laravel Routes
| Method | Endpoint | Description |
|---|---|---|
POST | /api/v1/auth/login | Log in with email and password |
POST | /api/v1/auth/register | Create a new user account |
POST | /api/v1/auth/google | Social login via Google ID token |
POST | /api/v1/auth/apple | Social login via Apple ID token |
POST | /api/v1/auth/register/google | Social registration via Google |
POST | /api/v1/auth/register/apple | Social registration via Apple |
POST | /api/v1/auth/forgot-password | Send password reset link |
POST | /api/v1/auth/reset-password | Reset password using token |
GET | /api/v1/auth/email/verify/{id}/{hash} | Verify email address |
POST | /api/v1/auth/email/verification-notification | Resend verification email |
POST | /api/v1/auth/logout | Revoke current access token |
PUT | /api/v1/auth/update-password | Change current user password |
GET | /api/v1/auth/connected-accounts | List connected accounts |
POST | /api/v1/auth/connected-accounts/google | Connect Google account |
POST | /api/v1/auth/connected-accounts/apple | Connect Apple account |
DELETE | /api/v1/auth/connected-accounts/{provider} | Disconnect provider |
DELETE | /api/v1/auth/security/sessions/{id} | Revoke a specific session |
DELETE | /api/v1/auth/security/sessions | Revoke all sessions |
DELETE | /api/v1/auth/security/delete-account | Permanently delete account |
POST | /api/v1/uploads | Upload file |
POST | /api/v1/webhooks/revenuecat | RevenueCat webhook |
Shared /api/v1/app/* Routes
| Method | Endpoint | Description |
|---|---|---|
GET | /api/v1/app/me | Fetch authenticated user details |
POST | /api/v1/app/device-tokens | Update device push token |
PUT | /api/v1/app/users/{uuid} | Update user profile information |
GET | /api/v1/app/security/authlogs | View account authentication history |
GET | /api/v1/app/security/sessions | List active device sessions |
GET | /api/v1/app/help-center | Help center overview |
GET | /api/v1/app/help-center/faqs | List FAQs |
GET | /api/v1/app/help-center/faqs/popular | List most viewed FAQs |
GET | /api/v1/app/help-center/faqs/{id} | Fetch FAQ details |
GET | /api/v1/app/help-center/contacts | List available contact methods |
GET | /api/v1/app/help-center/operating-hours | List business operating hours |
GET | /api/v1/app/help-center/feedback | List user feedback |
POST | /api/v1/app/help-center/feedback | Submit user feedback |
GET | /api/v1/app/notifications | List user notification history |
PUT | /api/v1/app/notifications/read-all | Mark all notifications as read |
PUT | /api/v1/app/notifications/{id}/read | Mark a specific notification as read |
DELETE | /api/v1/app/notifications/{id} | Delete a notification |
DELETE | /api/v1/app/notifications | Delete all notification history |
POST | /api/v1/app/notifications/send | Send a push notification to a specific user |
POST | /api/v1/app/notifications/broadcast | Broadcast a push notification to all users |
GET | /api/v1/app/notifications/preferences | Fetch notification settings |
PUT | /api/v1/app/notifications/preferences | Update notification settings |
GET | /api/v1/app/preferences | Fetch user app preferences |
PUT | /api/v1/app/preferences | Update app preferences |
GET | /api/v1/app/billing/entitlements | Fetch active billing entitlements |
The routes above are identical in both backend implementations; route the full /api/v1/app/* prefix to either Laravel compatibility mode or Go performance mode.