2026-06-09
Added
- Authorization code + PKCE support for PunchPlay developer apps
- App-level
allowed_scopespolicy for developer app registration - Request-scoped platform error IDs via
request_idandX-PunchPlay-Request-Id - Scope enforcement updates across
/me, playback, device auth, and OAuth token flows - Connected app revocation support in user settings
Updated
- Authentication docs now cover both OAuth and device code flows
- Quickstart now reflects web, browser, native, desktop, and TV integration paths
- Error docs now describe the current debugging and support contract
- OpenAPI reference now reflects the current platform auth surface
2026-06-08
Added
- Initial PunchPlay developer portal
- Platform API documentation for device authentication
- Platform playback documentation for
start,pause,resume,stop, andprogress - Live playback guides for now-playing, in-progress, and SSE updates
- Public API documentation for public user profile data
- Generated endpoint reference from the initial OpenAPI definition
- Developer app registration with
client_idissuance - Confidential and public client support
- Scope-aware platform tokens
Notes
- The current public platform contract is
v1. - Future work is expected in areas such as app registration automation, outbound webhooks, and richer read and write surfaces.