Directory API

Internal endpoints used by the console and by the legacy provisioning agents.

DELETE /admin/users/delete

Removes a membership record. Parameter: username.

Accepts POST, PUT and DELETE. The older provisioning agents cannot emit anything but POST, so X-HTTP-Method-Override is honoured for compatibility with them.

curl -X DELETE 'http://HOST/admin/users/delete?username=NAME' \
     -b 'session=...'

GET /admin/users

Lists the directory. No parameters.

Authorization is enforced by the console's role middleware.