[taler-docs] 02/02: document auth details in #6731

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository docs.

commit b55d5344186242153004930040d79a52dee258ea
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Tue Feb 2 15:07:35 2021 +0100

    document auth details in #6731
---
 core/api-merchant.rst | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/core/api-merchant.rst b/core/api-merchant.rst
index 0dbf7b0..7d7a784 100644
--- a/core/api-merchant.rst
+++ b/core/api-merchant.rst
@@ -865,7 +865,10 @@ Setting up instances
 
 .. http:patch:: /private/instances/$INSTANCE
 
-  Update the configuration of a merchant instance.
+  Update the configuration of a merchant instance.  PATCH operations against
+  an instance are authenticated by checking that an authorization is provided
+  that matches either the credential required by the instance being modified
+  OR the 'default' instance.
 
   **Request**
 
@@ -1058,6 +1061,10 @@ Deleting instances
   while disabling (the default) only deletes the private key
   and makes the instance unusable for new orders or payments.
 
+  For deletion, the authentication credentials must match
+  the instance that is being deleted or the 'default'
+  instance.
+
   **Request:**
 
   :query purge: *Optional*. If set to YES, the instance will be fully
@@ -1067,6 +1074,9 @@ Deleting instances
 
   :http:statuscode:`204 No content`:
     The backend has successfully removed the instance.  The body is empty.
+  :http:statuscode:`401 Unauthorized`:
+    The request is unauthorized. Note that for already deleted instances,
+    the request must be authorized using the 'default' instance.
   :http:statuscode:`404 Not found`:
     The instance is unknown to the backend.
   :http:statuscode:`409 Conflict`:

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.