Skip to main content

API server

The Synapse API is the /server process in the backend image. It is the only component that talks to Postgres.

Listen and health​

  • Bind: FALCONTALON_LISTEN_ADDR
  • Liveness/readiness: GET /api/health → { "status": "ok" }, no auth

CORS: FALCONTALON_CORS_ORIGINS must include the console origin. This docs site does not call the API.

Auth​

See Reference: Authentication.

  1. Authorization: Bearer <OIDC ID token> for console users
  2. X-API-Key for workers and tooling
  3. Query-string keys are rejected
  4. If FALCONTALON_OIDC_ISSUER_URL is empty, OIDC is off and only the API key works

Boot​

The process pings Postgres, loads API + encryption keys, discovers the OIDC issuer if configured, then starts the scheduler and worker HTTP handlers. In cluster mode it does not run pipeline jobs itself.

Image​

The backend image contains both /server and /worker. Python 3.12 is included because custom transformers spawn python3. The process runs as uid 65532.