Developer API
Build on top of Tasks Wiz. Every endpoint your tasks UI uses is
documented below — try them out in-page using your own account, or
copy the curl snippet to wire them into your own scripts.
Checking sign-in status…
The /* API
The interactive reference below documents the /* API —
server-side pagination & filtering, RFC 7807
problem+json errors, ETag/idempotency, bulk operations,
and first-class data export — served from the API domain
under Cognito auth. It is the canonical API the app uses.
Live API docs (FastAPI Swagger UI)
·
OpenAPI spec
·
Error catalog
Calling the API from a script
Each request needs a Cognito ID token in an
Authorization: Bearer header. The token expires after
about an hour, so get a fresh one each time your script runs.
Option 1: copy it from the browser. Sign in to the
app, open the developer tools console and run
sessionStorage.getItem('idToken'). This works for every
sign-in method, including Google.
Option 2: request one from Cognito. Only for accounts
that have a password (not Google-only). Needs jq. Replace
the upper-case placeholders with the values in
js/config.js: cognitoRegion,
clientId and apiUrl.
ID_TOKEN=$(curl -s https://cognito-idp.YOUR_COGNITO_REGION.amazonaws.com/ \
-H "Content-Type: application/x-amz-json-1.1" \
-H "X-Amz-Target: AWSCognitoIdentityProviderService.InitiateAuth" \
-d '{"AuthFlow":"USER_PASSWORD_AUTH","ClientId":"YOUR_CLIENT_ID","AuthParameters":{"USERNAME":"YOUR_EMAIL","PASSWORD":"YOUR_PASSWORD"}}' \
| jq -r '.AuthenticationResult.IdToken')
curl -s -H "Authorization: Bearer $ID_TOKEN" "YOUR_API_URL"
YOUR_API_URL is the apiUrl value (it ends in
/tasks). The command above lists your tasks. Avoid typing
a real password straight into the shell, because it's saved in your
shell history.