Required; must be non-empty.
Validation quirk (as implemented): INVALID_EMAIL is returned only if the email is
simultaneously missing @, missing ., and shorter than 5 characters.
Operation: create a new user account.
Required; must be non-empty (server returns EMPTY_FIELDS when missing/empty).
Required.
Validation (as implemented): length must be 8–16 characters, else INVALID_PASSWORD.
Operation: authenticate an existing user.
Required.
Required.
Score value (game-defined units). Nullable to indicate “no score”.
Validation: not currently enforced server-side; callers should send a finite number.
Operation: submit a p4-Vega score.
Required; missing value yields HTTP 401 with UNAUTHORIZED.
Operation: fetch the leaderboard.
POST /users request body.
Responsibility:
typeand carries that operation's payload.Invariants:
typehas a fixed payload shape.typeyields ApiErrorCodeINVALID_TYPE.