Skip to content

Returns devices currently blocked by nftables rate limiting. Uses reverse MAC lookup from 32-bit marks

GET
/api/blocked-devices

Auto-generated from server.go. Handler: s.getBlockedDevices.

Successful response

Returns devices currently blocked by nftables rate limiting. Uses reverse MAC lookup from 32-bit marks.

Schema hand-corrected in Session 9 from the 70-03a auto-lift artifact: added missing handler fields (client_duid, hostname, all_matches), retyped time fields as plain strings (handler emits RFC3339 strings, not typed time objects), relaxed data required-list to handler’s actual non-omitempty fields, widened stats.avg_remaining_seconds from int to number (float64), and widened chart_data[].sets from a single rigid key to additionalProperties: integer (Go emits map[string]int over all FirewallDecisionSets).

object
data
required
Array<object>
object
mark
required
string
expires_at

RFC3339 timestamp (handler emits string, not date-time-typed object)

string
expires_in_seconds
required
integer
client_mac
required
string
client_duid
string
confidence
required
string
hostname
string
vendor_class
string
last_seen

RFC3339 timestamp (handler emits string)

string
request_count
required
integer
set_name
required
string
set_display_name
required
string
mac_pattern
required
string
all_matches
Array<object>

A possible MAC address or DUID match for an nftables mark. Mirrors processor.MACMatch (internal/processor/nft_cache.go). Used in GetBlockedDevicesResponse.data[].all_matches.

object
client_mac
required
string
client_duid
string
hostname
string
vendor_class
string
last_seen

RFC3339 timestamp.

string
request_count
required
integer
pagination
required
object
total
required
integer
page
required
integer
totalPages
required
integer
stats
required
object
total_blocked
required
integer
avg_remaining_seconds
required

Float64 average; not integer.

number format: double
high_confidence
required
integer
low_confidence
required
integer
unknown
required
integer
available_sets
required
Array<object>
object
name
required
string
display_name
required
string
chart_data
required
Array<object>
object
label
required
string
sets
required

Map of nftables set name -> count for this time bucket. Keys are dynamic (one of FirewallDecisionSets).

object
key
additional properties
integer

Authentication is required or the supplied token is invalid.

Standardised error envelope per RFC 7807. Many existing endpoints still return an older shape (e.g. {"error": "..."}). This schema documents the target shape; legacy endpoints will be migrated in Phase 70. Per D-21 the spec describes current behaviour without enforcing the migration here.

object
type

A URI reference that identifies the problem type.

string format: uri-reference
default: about:blank
title

A short human-readable summary of the problem.

string
status

The HTTP status code generated by the origin server.

integer format: int32
>= 100 <= 599
detail

A human-readable explanation specific to this occurrence.

string
instance

A URI reference that identifies the specific occurrence.

string format: uri-reference
error

Legacy error message field. Will be removed once handlers are migrated.

string
details

Legacy per-field error details. Will be removed once handlers are migrated.

object
key
additional properties
string
requestId

The request id middleware-assigned identifier for tracing.

string

Internal server error

Standardised error envelope per RFC 7807. Many existing endpoints still return an older shape (e.g. {"error": "..."}). This schema documents the target shape; legacy endpoints will be migrated in Phase 70. Per D-21 the spec describes current behaviour without enforcing the migration here.

object
type

A URI reference that identifies the problem type.

string format: uri-reference
default: about:blank
title

A short human-readable summary of the problem.

string
status

The HTTP status code generated by the origin server.

integer format: int32
>= 100 <= 599
detail

A human-readable explanation specific to this occurrence.

string
instance

A URI reference that identifies the specific occurrence.

string format: uri-reference
error

Legacy error message field. Will be removed once handlers are migrated.

string
details

Legacy per-field error details. Will be removed once handlers are migrated.

object
key
additional properties
string
requestId

The request id middleware-assigned identifier for tracing.

string