Public activity content API

These read endpoints resolve published content for a client or for GOFA's shared public content. They do not expose content authoring or administration. Use Authorization: Bearer <firebase-id-token> where authentication is required; a backend integration may use its authorized ClientToken.

Read one client content item by key

GET /api/client/{clientId}/content/public/{key}

The client path is resolved against the authorized request. The following released keys are anonymous legal content:

terms-and-conditions, disclaimer, disclaimer-msk, and privacy-policy.

Other keys require an authenticated user. Use lang to request a locale; the handler falls back to Accept-Language and then English. A successful response has this shape:

{
  "success": true,
  "locale": "en",
  "data": {
    "contentId": "content-123",
    "key": "privacy-policy",
    "title": "Privacy Policy",
    "body": "# Privacy Policy\n\n…",
    "format": "markdown",
    "locale": "en"
  }
}

The resolved item can also include ownerClientId, categoryKey, order, version, publishAt, expiresAt, and metadata.

Read several client content items

GET /api/client/{clientId}/content/public?keys=privacy-policy,disclaimer

keys is required and accepts at most ten comma-separated keys. This endpoint requires an authenticated user and returns a flat array, rather than a map:

{
  "success": true,
  "locale": "en",
  "data": []
}

The caller remains responsible for handling missing or unpublished items in the returned array.

Read a public GOFA item by content ID

GET /api/content/{contentId}/public

This route is anonymous for active GOFA-owned public legal content. It accepts the same lang locale selection and returns { success, locale, data }, or 404 when the item is not found or is not publicly available. The released public key set is terms-and-conditions, disclaimer, disclaimer-msk, and privacy-policy.

List content categories

GET /api/client/{clientId}/content-categories

An authenticated user can read the category catalogue:

{
  "categories": [],
  "total": 0
}

The category list is a read response for runtime consumers. Content creation, updates, publishing, and client administration remain internal platform operations and are outside this guide.