Admin

Admin level management

List levels (admin)

get

Paginated level list with search. Requires GitHub OAuth.

Authorizations

githubOAuth

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Query parameters

pageintegerOptionalDefault: 1

limitintegerOptionalDefault: 10

qstringOptional

Search query (searches name, author, ID)

Responses

200

Admin level listing

application/json

totalintegerRequired

pageintegerRequired

limitintegerRequired

totalPagesintegerRequired

401

Authentication required

application/json

get

/api/admin/levels

HTTPcURLJavaScriptPython

GET /api/admin/levels HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "levels": [
    {
      "id": 1,
      "name": "text",
      "author": "text",
      "sun": 1,
      "is_water": 0,
      "difficulty": 1,
      "favorites": 1,
      "plays": 1,
      "version": 1,
      "featured": 0,
      "featured_at": 1,
      "logging_data": "text"
    }
  ],
  "total": 1,
  "page": 1,
  "limit": 1,
  "totalPages": 1
}

Update a level

put

Update level metadata. Requires GitHub OAuth or a valid one-time token.

Authorizations

githubOAuthoneTimeToken

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Path parameters

idintegerRequired

Level ID

Query parameters

tokenstringOptional

One-time admin token (alternative to OAuth)

Body

application/json

namestringOptional

authorstringOptional

sunintegerOptional

is_waterinteger · enumOptionalPossible values:

difficultyintegerOptional

favoritesintegerOptional

playsintegerOptional

featuredinteger · enumOptionalPossible values:

featured_atinteger · nullableOptional

Responses

200

Level updated

application/json

successbooleanRequiredExample: true

400

Invalid input or validation failure

application/json

401

Authentication required

application/json

404

Resource not found

application/json

put

/api/admin/levels/{id}

HTTPcURLJavaScriptPython

PUT /api/admin/levels/{id} HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 120

{
  "name": "text",
  "author": "text",
  "sun": 1,
  "is_water": 0,
  "difficulty": 1,
  "favorites": 1,
  "plays": 1,
  "featured": 0,
  "featured_at": 1
}

{
  "success": true,
  "level": {
    "id": 1,
    "name": "text",
    "author": "text",
    "sun": 1,
    "is_water": 0,
    "difficulty": 1,
    "favorites": 1,
    "plays": 1,
    "version": 1,
    "featured": 0,
    "featured_at": 1,
    "logging_data": "text"
  }
}

Delete a level

delete

Permanently deletes a level, its file, and all associated data. Requires GitHub OAuth or a valid one-time token.

Authorizations

githubOAuthoneTimeToken

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Path parameters

idintegerRequired

Level ID

Query parameters

tokenstringOptional

One-time admin token (alternative to OAuth)

Responses

200

Level deleted

application/json

successbooleanRequiredExample: true

400

Invalid input or validation failure

application/json

401

Authentication required

application/json

404

Resource not found

application/json

delete

/api/admin/levels/{id}

HTTPcURLJavaScriptPython

DELETE /api/admin/levels/{id} HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "success": true
}

Generate a one-time token for a level

post

Creates a single-use token scoped to a specific level, allowing unauthenticated edit/delete access.

Authorizations

githubOAuth

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Path parameters

idintegerRequired

Level ID

Responses

200

Token generated

application/json

tokenstringRequiredExample: token_abc123...

level_idintegerRequired

400

Invalid input or validation failure

application/json

401

Authentication required

application/json

404

Resource not found

application/json

post

/api/admin/levels/{id}/token

HTTPcURLJavaScriptPython

POST /api/admin/levels/{id}/token HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "token": "token_abc123...",
  "level_id": 1
}

Feature a level

post

Marks a level as featured. Requires GitHub OAuth.

Authorizations

githubOAuth

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Path parameters

idintegerRequired

Level ID

Responses

200

Level featured

application/json

successbooleanRequiredExample: true

400

Invalid input or validation failure

application/json

401

Authentication required

application/json

404

Resource not found

application/json

post

/api/admin/levels/{id}/feature

HTTPcURLJavaScriptPython

POST /api/admin/levels/{id}/feature HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "success": true,
  "level": {
    "id": 1,
    "name": "text",
    "author": "text",
    "sun": 1,
    "is_water": 0,
    "difficulty": 1,
    "favorites": 1,
    "plays": 1,
    "version": 1,
    "featured": 0,
    "featured_at": 1,
    "logging_data": "text"
  }
}

Unfeature a level

delete

Removes the featured status from a level. Requires GitHub OAuth.

Authorizations

githubOAuth

AuthorizationstringRequired

GitHub OAuth2 session-based authentication (via browser cookies)

Path parameters

idintegerRequired

Level ID

Responses

200

Level unfeatured

application/json

successbooleanRequiredExample: true

400

Invalid input or validation failure

application/json

401

Authentication required

application/json

404

Resource not found

application/json

delete

/api/admin/levels/{id}/feature

HTTPcURLJavaScriptPython

DELETE /api/admin/levels/{id}/feature HTTP/1.1
Host: backend.pvzm.net
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "success": true,
  "level": {
    "id": 1,
    "name": "text",
    "author": "text",
    "sun": 1,
    "is_water": 0,
    "difficulty": 1,
    "favorites": 1,
    "plays": 1,
    "version": 1,
    "featured": 0,
    "featured_at": 1,
    "logging_data": "text"
  }
}