Sign-in for installed apps, and private emergency contacts

Sign-in for installed apps, and private emergency contacts

Desktop and command-line apps sign in with OAuth, /me returns the user a token acts as, work items move to the board or the backlog, and emergency contacts are private to each employee.

View as Markdown

REST API

  • Breaking: An employee's emergency contacts are only visible to and writable by that employee, and you can only add emergency contacts for yourself. Integrations that read other employees' emergency contacts no longer get them. See Contact.
  • New: Desktop and command-line apps that other people install can sign them in with OAuth, using the authorization code flow with PKCE. The app registers itself and can never delete through the REST API. See Sign in with OAuth.
  • New: Connected apps under API access in the user menu lists the apps you signed in to the REST API, and Revoke ends their access. Disconnect in the AI panel ends only an app's AI connection. When one sign-in gave an app both, either one ends both. See Disconnect an app.
  • New: GET/me returns the user the token acts as.
  • New: POST/work-items/{work_item}/actions/move places a work item on the board or in the backlog, the way dragging it in plnnrly does.
  • New: Projects and work items have a web_url that opens them in plnnrly. See the Project and Work item schemas.
  • Changed: Adding, changing or deleting an invoice line without the Finalise sales invoices permission sends the invoice back to Pending approval, as editing the invoice does. See PATCH/sales-invoice-rows/{sales_invoice_row}.
  • Fixed: The OpenAPI document now describes the request body of POST/work-items/{work_item}/actions/transition and POST/sprints/{sprint}/actions/complete, so generated clients can send it.