Audit
Who changed what, and when.
2 endpoints · base URL https://api.aerscheduler.com
get
/auditList audit events
The organization's activity, newest first. Administrators only — this is every member's movements in one list.
Paged with limit and offset like every other collection here; pagination.total tells you how many match your filters.
Query parameters
entityType | "reservation" | "invoice" | "squawk" | "resource" | "orgUser" | "joinRequest" | Only events about this kind of thing. |
actorOrgUserId | integer | Only events by this member. |
resourceId | integer | Only events touching this aircraft, simulator or room. |
startDate | string | Start of the window, ISO 8601. Include an offset or Z. |
endDate | string | End of the window, ISO 8601. |
limit | integer | Rows to return, 1–1000. Defaults to 1000; a larger value is clamped rather than rejected. |
offset | integer | Rows to skip, for paging. Defaults to 0. |
sort | string | Field to order by before paging, as a dot path into the row — total, user.firstName. Omit to keep the endpoint's own order. Numbers and ISO timestamps order as numbers and instants, not as text, and empty values always sort last regardless of direction. Ordering happens before the page is cut, so it orders the whole collection rather than the page you are holding. |
order | "asc" | "desc" | asc (default) or desc. Only meaningful with sort. |
Responses
200 | OK | The audit events.→ { data: AuditEvent[] } |
400 | Bad Request | An unreadable filter. |
401 | Unauthorized | No token, an expired token, or a malformed one. Sign in again. |
403 | Forbidden | Authenticated, but not allowed to do this. |
429 | Too Many Requests | Rate limited. Retry-After says how long to wait. |
Example request
curl https://api.aerscheduler.com/audit \
-H "Authorization: Bearer $AERSCHEDULER_KEY"get
/audit/{entityType}/{entityId}Get one thing's history
Everything recorded about a single entity, oldest first — what the reservation and invoice drawers render. Guarded by the same rule that guards the entity itself, so this is never more permissive than the record it describes.
History begins when auditing was switched on; anything older cannot be reconstructed.
Path parameters
entityTyperequired | integer | One of reservation, invoice, squawk, resource, orgUser, joinRequest. |
entityIdrequired | integer | The id of that entity. |
Query parameters
limit | integer | Rows to return, 1–1000. Defaults to 1000; a larger value is clamped rather than rejected. |
offset | integer | Rows to skip, for paging. Defaults to 0. |
sort | string | Field to order by before paging, as a dot path into the row — total, user.firstName. Omit to keep the endpoint's own order. Numbers and ISO timestamps order as numbers and instants, not as text, and empty values always sort last regardless of direction. Ordering happens before the page is cut, so it orders the whole collection rather than the page you are holding. |
order | "asc" | "desc" | asc (default) or desc. Only meaningful with sort. |
Responses
200 | OK | The events, oldest first.→ { data: AuditEvent[] } |
400 | Bad Request | Not an entity we keep a trail for. |
401 | Unauthorized | No token, an expired token, or a malformed one. Sign in again. |
403 | Forbidden | You are not allowed to see this entity. |
429 | Too Many Requests | Rate limited. Retry-After says how long to wait. |
Example request
curl https://api.aerscheduler.com/audit/:entityType/:entityId \
-H "Authorization: Bearer $AERSCHEDULER_KEY"