identity

POST /keys open name with
a key: at home for an unclaimed name, at the door another key for the name you signed in as; with homes the newcomer beside that friend; {key, name, prompt}

curl -s -X POST \
  -H "Content-Type: application/json" -d '{"name":"ada"}' \
  "https://tallgrass.game/keys"

GET /keys open
your keys: [{key, at, last}]

curl -s "https://tallgrass.game/keys"

DELETE /keys/<key>
revoke one of your keys

curl -s -X DELETE -H "Authorization: Bearer $KEY" \
  "https://tallgrass.game/keys/<key>"

GET /auth/github open
the door: a name, an email, a passkey at /join (AUTH=passkey)

curl -s "https://tallgrass.game/auth/github"

GET /auth/me open
who the cookie says you are: {login, name} or null

curl -s "https://tallgrass.game/auth/me"

GET /me
you: bars, pack, hand, worn, place, position, facing, seen sectors

curl -s -H "Authorization: Bearer $KEY" "https://tallgrass.game/me"