subscriptionRoutes

The operator's read of the node's subscriptions, GET /wow/ops/subscriptions (OpsPaths.SUBSCRIPTIONS), served with the parked routes (parkedRoutes) and read-only: the node's id (node); each subscription (subscriptions) by its key, <context>.<name> (me.ahoo.wow.runtime.subscription.SubscriptionId.key), its group, its source (log or topic), its parked entries as the node's sampler last counted them (up to its NodeSampler.maxParked; null when it has not), and its partitions, each with its position and, in one this node runs, runs, the head and lag the sample read, and whether it is paused or throttled; and the checkpoints its groups hold under names they no longer have (orphans: group, name, partitions, parked). ServiceNode.subscriptionsView says what each holds.

The caller is authenticated with callerResolver (401 otherwise) and must reach every tenant (TenantPolicy.confinedTo), else 403 wow.auth.forbidden: the view is the whole service's, of no aggregate and no tenant's data, so neither a command's authorization on an aggregate nor a tenant's filter applies to it. Then authorizer, the node's ServiceRouteAuthorizer, decides the route of the reserved context wow named ops.subscriptions (RouteAction), which CoSec decides as wow:ops.subscriptions; with none, as on a service route, every such caller reads it. Errors are problems as on the other public routes, a store that is unavailable wow.storage.unavailable with Retry-After.