Routes - Pawabase

A Route is a custom endpoint under /rest/v1 handled by a flow, the same as Logic → Routes in Studio.

from pawabase_iac import Route, RateLimit

Route(
    "/orders/{id}/pay",
    handler=pay_order,                     # a Flow object, or the flow's name
    method="POST",
    name="Pay an order",
    policy=P.authenticated() & P.permission("orders.pay"),
    rate_limit=RateLimit(10, 60),
)

Argument	Meaning	Default
`path`	Under `/rest/v1`. `{param}` for path parameters	required
`handler`	The flow that runs	required
`method`	`GET`, `POST`, `PUT`, `PATCH`, `DELETE`	`POST`
`name`, `description`	The operation name and notes in the API docs	`""`
`policy`	Who may call it. Any policy	none (signed-in users)
`input_fields`	A list of fields the request body must have	none
`input_schema`	A Schema for the body (instead of fields)	none
`response_schema`	A Schema documenting the response	none
`handler_type`	Leave at `flow` (the only kind the server runs)	`flow`
`rate_limit`	`RateLimit(limit, window)`	none
`cache_ttl`	Seconds to cache `GET` responses	`0`
`tags`	Group in the API docs	`[]`
`enabled`	`False` answers 404	`True`

Your app then calls it with pawabase.routes.post("orders/42/pay", ...). See Routes.

Check who owns what

A route’s policy can’t know an order is the caller’s; the flow must check. Make “load the record as the caller, then continue” the first steps of the flow (Rules on routes).

Flows

What runs.

Calling routes

From your app.