# FTS Server
This crate provides a REST API for the core flow trading operations. Building
the sibling crate `fts-demo` will generate an OpenAPI schema. A running server will host this schema at http://localhost:8080/rapidoc.
## On the use of JSON and HTTP
It is true that JSON is a significantly flawed choice for (de)serialization of
bid data. It is also true that a RESTful API over HTTP is questionable, at
best, with respect to building a trading platform. On the other hand, these
choices allow for virtually any programming environment to easily interface
with the server, as well as open the door to rich, web-based clients.
Given that this project is primarily intended to *motivate* the use of flow trading, especially in the context of forward markets, these trade-offs are more than reasonable. With that said, the design of flow trading specifically discourages high-frequency execution, so the performance overhead of these trade-offs are also largely irrelevant.
## Authorization
In the interest of simplicity, endpoints that process bid data (or execute administrative actions) expect HTTP requests to contain the `Authorization` header with a JWT bearer token. The `sub:` claim of this token must be the bidder's UUID. To authorize an administrative action, this token must contain the custom claim `admin: true`. It is left to the operator to securely authenticate and generate these tokens.
## API Endpoints and Data Types
Please refer to the automatically generated OpenAPI schema for up-to-date documentation of the endpoints. Note that any endpoint expecting a datetime type expects an RFC3339-compliant string.