Skip to main content

Asset API Limitations

Consolidated limitations​

  • Authorization — Not implemented: routes do not require authentication, policies, or roles; resource ownership and callback/document authorization are absent.
  • Tenancy — Transitional: query filters and required write context exist, but forwarded-header trust and ownership enforcement require confirmation.
  • Queries — Not implemented: true pagination, totals, search, flexible sorting, date filters, and report APIs are absent.
  • Contracts — Not implemented: API versioning, deprecation metadata, explicit response metadata, Swagger bearer scheme, and a consistent typed error envelope are absent.
  • Validation — Not implemented: employee existence/ownership, serial uniqueness, request-size policy, and cross-service transaction validation are absent.
  • Documents — Transitional: remote storage precedes local reference save; removal retains external bytes; no reconciliation endpoint exists.
  • Workflow — Transitional: callback and HTTP integration exist, but callback authentication, retry API, and distributed consistency are absent.
  • Compatibility — Transitional: legacy routes, numeric identity, status mapping, shared workspace ownership, gateway cutover, and shadow routing remain.
  • Health — Foundation: health has no dependency readiness checks; health-data is diagnostic counts.
  • Testing — Not implemented: dedicated API integration, contract, authorization, cross-tenant security, load, and OpenAPI regression suites were not found.

Production route exposure, policy ownership, version governance, retention, compatibility retirement, and test ownership Require confirmation.

Classification​

The API is Transitional. Capabilities explicitly described as absent are Not implemented. Host diagnostics and evidence routes are Foundation. Production exposure, ownership, and governance Require confirmation.

Source References​

  • microservices/src/asset-service/Program.cs
  • microservices/src/asset-service/Api/AssetEndpoints.cs
  • microservices/src/asset-service/Api/AssetCompatEndpoints.cs
  • microservices/src/asset-service/Api/EndpointResults.cs
  • microservices/scripts/smoke-asset.ps1