Skip to main content

2026-06-09

Added

  • Authorization code + PKCE support for PunchPlay developer apps
  • App-level allowed_scopes policy for developer app registration
  • Request-scoped platform error IDs via request_id and X-PunchPlay-Request-Id
  • Scope enforcement updates across /me, playback, device auth, and OAuth token flows
  • Connected app revocation support in user settings

Updated

  • Authentication docs now cover both OAuth and device code flows
  • Quickstart now reflects web, browser, native, desktop, and TV integration paths
  • Error docs now describe the current debugging and support contract
  • OpenAPI reference now reflects the current platform auth surface

2026-06-08

Added

  • Initial PunchPlay developer portal
  • Platform API documentation for device authentication
  • Platform playback documentation for start, pause, resume, stop, and progress
  • Live playback guides for now-playing, in-progress, and SSE updates
  • Public API documentation for public user profile data
  • Generated endpoint reference from the initial OpenAPI definition
  • Developer app registration with client_id issuance
  • Confidential and public client support
  • Scope-aware platform tokens

Notes

  • The current public platform contract is v1.
  • Future work is expected in areas such as app registration automation, outbound webhooks, and richer read and write surfaces.