Skip to content

Add Lists, List items, Privacy, Events and webhook verification; remove legacy endpoints (3.0.0)#79

Closed
bartes wants to merge 1 commit into
developfrom
parity/full-api-3.0.0
Closed

Add Lists, List items, Privacy, Events and webhook verification; remove legacy endpoints (3.0.0)#79
bartes wants to merge 1 commit into
developfrom
parity/full-api-3.0.0

Conversation

@bartes

@bartes bartes commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

Extends CastleClient with the full Castle API surface and removes long-deprecated endpoints, bumping the package to 3.0.0.

Added

  • Lists APICreateList, GetAllLists, GetList, UpdateList, DeleteList, QueryLists.
  • List items APICreateListItem, GetListItem, UpdateListItem, QueryListItems, CountListItems, ArchiveListItem, UnarchiveListItem, CreateBatchListItems.
  • Privacy APIRequestUserData, DeleteUserData (POST / DELETE /v1/privacy/users).
  • Events API (enterprise)EventsSchema, QueryEvents, GroupEvents.
  • Webhook signature verificationCastle.Webhook.Verify(body, signature) and Castle.Webhook.Verify(body, signature, apiSecret), validating the X-Castle-Signature header (HMAC-SHA256, Base64); throws the new CastleWebhookVerificationException.
  • IMessageSender.Put now accepts an optional payload to support the update endpoints.

Removed (breaking)

  • Legacy Authenticate and Track endpoints (and their Build*/Send* helpers and the Verdict response). Use Risk, Filter and Log.
  • Device-management endpoints GetDevice, GetDevicesForUser, ApproveDevice, ReportDevice, ArchiveDevices (and the Device, DeviceList, User models).
  • Impersonation endpoints ImpersonateStart, ImpersonateEnd (and their request models).
  • Client-id extraction: Context.FromHttpRequest no longer reads X-Castle-Client-ID / __cid; RequestContext.ClientId and DeviceItem.IsCurrentDevice are removed. The default request context is headers, ip and library.

…ve legacy endpoints (3.0.0)

Adds the Lists, List items, Privacy and Events (enterprise) API surface to
CastleClient, plus Castle.Webhook.Verify for X-Castle-Signature validation.

Removes the legacy Authenticate/Track endpoints, device management,
impersonation, and client-id extraction (X-Castle-Client-ID/__cid and
RequestContext.ClientId).
@bartes

bartes commented Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Combined into #80, which carries both the framework/dependency/CI modernization and the full 3.0.0 API surface in a single 3.0.0 release PR.

@bartes bartes closed this Jun 10, 2026
@bartes
bartes deleted the parity/full-api-3.0.0 branch June 10, 2026 15:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant