docs: Add base path for API endpoints to Swagger

server/api/controllers/access-tokens/accept-terms.js

@@ -5,7 +5,7 @@
 
 /**
  * @swagger
- * /api/access-tokens/accept-terms:
+ * /access-tokens/accept-terms:
  *   post:
  *     summary: Accept terms and conditions
  *     description: Accept terms during the authentication flow. Converts the pending token to an access token.

server/api/controllers/access-tokens/create.js

@@ -5,7 +5,7 @@
 
 /**
  * @swagger
- * /api/access-tokens:
+ * /access-tokens:
  *   post:
  *     summary: User login
  *     description: Authenticates a user using email/username and password. Returns an access token for API authentication.

server/api/controllers/access-tokens/delete.js

@@ -5,7 +5,7 @@
 
 /**
  * @swagger
- * /api/access-tokens:
+ * /access-tokens:
  *   delete:
  *     summary: User logout
  *     description: Logs out the current user by deleting the session and access token. Clears HTTP-only cookies if present.

server/api/controllers/access-tokens/exchange-with-oidc.js

@@ -5,7 +5,7 @@
 
 /**
  * @swagger
- * /api/access-tokens/exchange-with-oidc:
+ * /access-tokens/exchange-with-oidc:
  *   post:
  *     summary: Exchange OIDC code for access token
  *     description: Exchanges an OIDC authorization code for an access token. Creates a user if they do not exist.

server/api/controllers/access-tokens/revoke-pending-token.js

@@ -5,7 +5,7 @@
 
 /**
  * @swagger
- * /api/access-tokens/revoke-pending-token:
+ * /access-tokens/revoke-pending-token:
  *   post:
  *     summary: Revoke pending token
  *     description: Revokes a pending authentication token and cancels the authentication flow.