Expand Grindr API docs using the decompiled app endpoint footprint, including messaging, browse/users, settings/auth, and miscellaneous API areas.

@@ -8,3 +8,12 @@ Authorization: Grindr3 [session ID]
 
 Session ID is a JWT, see [Session ID](/grindr-api/authentication#session-id). Session IDs are short-lived (exactly 30 minutes) and non-extendable (expiration duration is fixed). However, issuing subsequent requests to [Sign in endpoint](/grindr-api/authentication#sign-in) with any of `authToken`s (regardless of whether they're expired or not) allows you to generate more Session IDs. Previous Session ID JWT tokens aren't revoked, meaning you can request a new Session ID any time you need to make a request, but to avoid hitting [rate limits](/grindr-api/rate-limits), consider caching them until a token either expires or becomes non valid for any other reason.
 
+The decompiled request interceptor adds `Authorization: Grindr3 ...` when a user session is active. It explicitly permits these account/session recovery endpoints without an active session:

@@ -4,11 +4,13 @@
 
 Make sure you're passing all [Security headers](/grindr-api/security-headers) or you might stumble upon `{"code":28,"message":"ACCOUNT_BANNED","profileId":null,"type":1,"reason":null,"isBanAutomated":true,"thirdPartyUserIdToShow":null,"banSubReason":null}` — but don't fret — it's a fake error, your account isn't banned and API simply blocked your request, not account.
 
+Does not require [Authorization](/grindr-api/api-authorization). The app calls this through a dynamic Retrofit `@Url`.

@@ -9,3 +11,3 @@
 ```
 
-Body:
+Body: `LoginEmailRequest`

@@ -16,16 +18,36 @@ Body:
 - `token` — FCM (push service) string or `null`
 - `geohash` — [geohash](/grindr-api/browse/location#geohash) string or `null`
 
+Response: `AuthResponse`

@@ -26,3 +34,1 @@
-- `profileId` — string with numbers, account's ID
-- `sessionId` — JWT token (see [Session ID](#session-id))
-- `authToken` — Auth token for session refresh
+Does not require [Authorization](/grindr-api/api-authorization). The app calls this through a dynamic Retrofit `@Url`.

@@ -29,0 +34,4 @@
+Does not require [Authorization](/grindr-api/api-authorization). The app calls this through a dynamic Retrofit `@Url`.
+
+```
+POST /v8/sessions/thirdparty

@@ -6,3 +3,1 @@
-- POST /v1/boost/preferences/super SuperBoostPreferencesRequest
-- POST /v1/boost/preferences/standard BoostPreferencesRequest
-- GET /v1/consumables/inventory . ConsumableInventoryResponse
+Boost endpoints require [Authorization](/grindr-api/api-authorization).

@@ -10,0 +36,4 @@
+
+- `faceTecUserAgent` — string
+- `idScan` — string
+- `idScanFrontImage` — string

@@ -3,3 +3,3 @@
 Blocking a user automatically deletes the conversation for both of you.
 
-## Get blocked users
+Blocks endpoints require [Authorization](/grindr-api/api-authorization).

@@ -31,1 +30,3 @@
-- `updateTime` — integer, appears to be `0`
+- `profileId` — string with numeric profile ID
+
+Response: Raw `ResponseBody`.

@@ -10,3 +12,3 @@
 
 - `geohash` — string, optional
-- `sort` — string, optional
+- `sortBy` — string, optional

@@ -5,3 +3,1 @@
-- POST /v1/alist/feedback/{conversationId} AListFeedback
-- GET /v3/alist/profiles?filter=string[] . AListProfilesResponse
-- DELETE /v1/alist/profiles/{profileId} 
+A-list endpoints require [Authorization](/grindr-api/api-authorization).

@@ -76,3 +212,2 @@
-Body:
+Body: `VisitingStatusRequest`
 
-- `setting` — string, e.g. `"AUTO"`, WIP