LMS API Limitations

Summary

Source-backed Draft reference for LMS API Limitations across the implemented Training Service and, where applicable, Gateway surface.

Audience

API consumers, engineering, QA, support, architecture, security, product, and implementation reviewers.

Reference Content

Consolidated evidence

Area	Confirmed limitation	Classification
Authentication/authorization	No Training registration, middleware, endpoint policy, or ownership checks	Foundation
Collections	Most lists/reports/exports are unbounded; no pagination/sorting contract	Foundation
Errors	Mixed direct shapes; no ProblemDetails or uniform Training envelope	Transitional
Evolution	No API versioning, deprecation metadata, or compatibility layer	Not implemented
Course/content	No detail/update/delete or independent module/lesson routes	Partial
Learning paths	No detail/update/delete, prerequisites, or enforced progression	Partial
Employee learning	Identifier/collection based; no authenticated self-only views	Foundation
Sessions	No capacity, attendance, completion/cancel, or schedule validation	Partial
Assessments	Caller-supplied result; answer material storage and no attempt policy	Transitional
Certificates	No create/detail/revoke/expire/renew/verify lifecycle APIs	Partial
Documents	No distributed transaction, compensation, versioning, or cleanup	Transitional
Diagnostics	Direct entity/count exposure; no delivery projection or dependency health	Transitional
OpenAPI	No security scheme, explicit responses, versioning, or production guard	Foundation
Tests	Broad smoke only; no dedicated API/contract/security collection/suite	Partial

Requires confirmation

Security ownership, diagnostic exposure, export access, response redaction, data limits, scoring authority, certificate governance, external-document reconciliation, Gateway trust, and API evolution ownership require confirmation before the surface can be considered production-governed.

Source References

• microservices/src/training-service/Program.cs
• microservices/src/training-service/Api/TrainingEndpoints.cs
• microservices/src/training-service/Application/DocumentServiceClient.cs
• microservices/src/gateway-api/EssEndpoints.cs
• microservices/scripts/smoke-training.ps1

Related Articles

• LMS API documentation
• LMS technical documentation

See Also

• Endpoint catalog
• API limitations

Keywords

• LMS API
• Training Service
• Source-backed contract

Revision Information

• Status: Draft
• Last reviewed: 2026-07-17
• Review cycle: Quarterly