docs on endpoint

crates/service/web/storyteller_web/src/docs/api_doc.rs

@@ -119,6 +119,7 @@ use crate::http_server::endpoints::users::get_profile_handler::*;
 use crate::http_server::endpoints::users::login_handler::*;
 use crate::http_server::endpoints::users::logout_handler::*;
 use crate::http_server::endpoints::users::session_info_handler::*;
+use crate::http_server::endpoints::users::session_token_info_handler::*;
 use crate::http_server::endpoints::voice_conversion::inference::enqueue_voice_conversion_inference::*;
 use crate::http_server::endpoints::voice_designer::inference::enqueue_tts_request::*;
 use crate::http_server::endpoints::voice_designer::voice_datasets::list_datasets_by_user::*;
@@ -210,6 +211,7 @@ use crate::http_server::web_utils::response_success_helpers::*;
     crate::http_server::endpoints::users::get_profile_handler::get_profile_handler,
     crate::http_server::endpoints::users::login_handler::login_handler,
     crate::http_server::endpoints::users::logout_handler::logout_handler,
+    crate::http_server::endpoints::users::session_token_info_handler::session_token_info_handler,
     crate::http_server::endpoints::users::session_info_handler::session_info_handler,
     crate::http_server::endpoints::voice_conversion::inference::enqueue_voice_conversion_inference::enqueue_voice_conversion_inference_handler,
     crate::http_server::endpoints::voice_designer::inference::enqueue_tts_request::enqueue_tts_request,
@@ -324,6 +326,8 @@ use crate::http_server::web_utils::response_success_helpers::*;
     CreateBetaKeysError,
     CreateBetaKeysRequest,
     CreateBetaKeysSuccessResponse,
+    SessionTokenInfoSuccessResponse,
+    SessionTokenInfoError,
     CreateCheckoutSessionError,
     CreateCheckoutSessionRequest,
     CreateCheckoutSessionSuccessResponse,

crates/service/web/storyteller_web/src/http_server/endpoints/users/session_token_info_handler.rs

@@ -25,6 +25,7 @@ pub struct SessionTokenInfoSuccessResponse {
   /// A signed session that can be sent as a header, bypassing cookies.
   /// This is useful for API clients that don't support cookies or Google
   /// browsers killing cross-domain cookies.
+  /// Send this as the "Session:" header.
   pub maybe_signed_session: Option<String>,
 }
 
@@ -59,6 +60,10 @@ impl fmt::Display for SessionTokenInfoError {
   }
 }
 
+/// Hack to bypass CORS. !!!!!!!!!!!DO NOT USE THIS!!!!!!!!!!!!!!
+///
+/// Seriously do not use this unless you okay it with Brandon, Kasisnu, or Michael.
+/// This is poison and is a huge security vuln.
 #[utoipa::path(
   get,
   tag = "Users",