SCL Onboarding — API Reference

201 Returns JWT token and email. Account is immediately active.

{ "token": "eyJ...", "email": "user@example.com" }

400 Missing fields or password too short  409 Email already registered

200 JWT token and email

{ "token": "eyJ...", "email": "user@example.com" }

401 Invalid email or password

Always returns 200 to prevent email enumeration. Sends a reset link to the email fire-and-forget. Reset token is valid for 1 hour.

{ "message": "If that email exists, a reset link has been sent" }

200

{ "message": "Password updated successfully" }

400 Invalid/expired token, or password too short

Returns the learner row for the authenticated user, or null if no data saved yet.

{
  "user_id": 1,
  "first_name": "Ian",
  "surname": "Stockley",
  "progress_step": 3,
  "submitted": 0,
  "completed": 0,
  ...all learner fields
}

Called after each step to persist progress. All fields are optional — only provided fields overwrite existing values.

{ "ok": true }

Sets submitted = 1 and completed = 1 on the learner record. Fires a confirmation email (non-fatal if it fails). Call after /save with progress_step: 11.

{ "ok": true }

{ "ok": true }

Returns notifications ordered by unread first, then newest first.

[
  {
    "id": 12,
    "title": "Application update",
    "body": "Your application has been reviewed.",
    "read": 0,
    "created_at": "2026-03-05 10:32:00"
  }
]

Only marks as read if the notification belongs to the authenticated user.

{ "ok": true }

{ "ok": true }

Ordered newest first. Includes message counts.

[
  {
    "id": 1,
    "email": "ian@example.com",
    "created_at": "2026-03-01 09:00:00",
    "full_name": "Ian Stockley",
    "submitted": 0,
    "completed": 0,
    "progress_step": 4,
    "msg_count": 2,
    "unread_count": 1
  }
]

Returns all learner form fields plus account metadata.

{
  "email": "ian@example.com",
  "registered_at": "2026-03-01 09:00:00",
  "submitted_at": null,
  "progress_step": 4,
  "submitted": 0,
  "completed": 0,
  "first_name": "Ian",
  "surname": "Stockley",
  ...all form fields
}

404 User not found

Returns notifications sent to this learner, newest first.

[
  {
    "id": 5,
    "title": "Next steps",
    "body": "Please bring your ID to your first session.",
    "read": 1,
    "created_at": "2026-03-04 14:00:00"
  }
]

Resets submitted and completed to 0, allowing the learner to edit and resubmit their application.

{ "ok": true }

Inserts a notification row per user. Push notification sent fire-and-forget to any iOS device tokens registered.

{
  "userIds": [1, 3, 7],
  "title": "Reminder",
  "body": "Don't forget to complete step 5 of your application."
}

{ "sent": 3 }

[
  {
    "id": 1,
    "name": "Day 3 nudge",
    "trigger_type": "stuck_step",
    "trigger_step": 3,
    "trigger_field": null,
    "trigger_days": 3,
    "message_title": "Still there?",
    "message_body": "You left off at step 3 — finish now!",
    "active": 1,
    "created_at": "2026-03-01 09:00:00",
    "send_count": 12
  }
]

{ "id": 4 }

{ "ok": true }

Permanently deletes the workflow and its send history. Cannot be undone.

{ "ok": true }