Modules API Reference

Modules are documented here so the core Flowless auth reference stays focused while product extensions remain easy to discover.

Use this page when you want a quick map of the module surface, the main operational behaviors, and the most relevant live-doc sources.

Available modules

Module	What it is	Reference
Module Hub	Management layer for installing, updating, and auditing modules from Pubflow Platform	Operations index
Blog	Modular post/content system with categories, comments, publishing, and extensions	Operations index
Post Types	Custom content types, validated custom_fields, and per-type publish behaviors	Operations index + API overview
Onboarding	First-run complete + biz on /auth/user/me; acquisition write-only	Operations index + API overview
Business	is_business / biz_* via PUT /auth/user/me (ext-business)	Operations index + API overview
Privacy	GDPR/CCPA/privacy_region under /auth/user/me/privacy*	Operations index + API overview
2FA	Login-time security flow with pending sessions, code verification, and session promotion	Operations index

How to think about modules

• Module Hub is the operational layer.
• Blog is a content extension.
• Post Types sits on top of Blog for typed content (CPT).
• Onboarding adds optional columns on users plus POST /auth/user/me/onboarding/complete.
• Business is the onboarding ext-business surface for company profile via PUT /auth/user/me.
• Privacy is the onboarding ext-privacy surface for consent after first run.
• Two-Factor Authentication is a security flow that augments login and session handling.

That separation helps developers answer the right question quickly:

• Do I need to manage a module? Use the Module Hub operations index.
• Do I need blog endpoints and content behavior? Read the Blog operations index.
• Do I need custom content types / custom_fields? Read the Post Types operations index.
• Do I need first-run acquisition / business fields? Read the Onboarding operations index.
• Do I need business profile updates only? Read the Business operations index.
• Do I need GDPR/CCPA routes? Read the Privacy operations index.
• Do I need stronger login verification? Read the 2FA operations index.

What you should document for each module

A good module page should always explain:

1. What problem the module solves
2. What routes or behaviors it adds
3. What configuration it depends on
4. How to manage it safely in Pubflow Platform
5. Which page is the implementation reference

Recommended reading order

• Modules landing page
• Modules operations home
• Module Hub operations
• Blog operations
• Post Types operations
• Onboarding operations
• Business operations
• Privacy operations
• 2FA operations
• Blog module
• Post Types module
• Onboarding module
• Business module
• Privacy module
• 2FA module
• Post Types API
• Onboarding API
• Business API
• Privacy API
• Flowless API Reference