v2
latestOpenAPI 3.1.02026-08-05313314398.1 KBapps
Favorite App
Mark this app as a favourite for the current user (idempotent).
Per-user state, but the caller still needs VIEWER on the resource — company membership alone would otherwise let any member toggle a favourite on apps they cannot see, and use the 403-vs-404 response split to enumerate app IDs across the access boundary. The permission check runs before _load_app_or_404 so a missing grant collapses both "doesn't exist" and "exists but inaccessible" into the same 403 for non-owners, matching get_app / get_app_bundle and PUT /projects/{project_id}/favorite.
put/api/v1/apps/{app_id}/favorite
Path parameters
app_idstring uuid required
Response
Successful Response