Mark read or unread
PATCH/admin/notifications/:id
No permission check — ownership is the authorization, and it is enforced
in the update's own WHERE clause rather than by a comparison this route
could skip. Someone else's notification is indistinguishable from one that
does not exist: both are a 404.
Request
Responses
- 204
- 400
- 401
- 403
- 404
Marked
X-Tenant-Id is missing, or the body is malformed
No session cookie, or it expired
The caller is not a member of this casino
No such notification of the caller's