internkim
APIEvery endpointCompany

Take the company's picture down

Removes the company's picture. Only an administrator may take it down, and the answer's `profileImageURL` is `null`.

DELETE
/company/profile-image

Authorization

memberToken
AuthorizationBearer <token>

The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.

The first token is made signed in, from the settings screen. After that a token makes its own successors: POST /token for a new one, DELETE /token for the old one, so a script rotates without a browser. A token can neither mint a rung above its own nor revoke itself. Send Authorization: Bearer <token> on every request.

In: header

Response Body

application/json

text/plain

text/plain

curl -X DELETE "https://example.com/company/profile-image"
{  "profileImageURL": "string"}