Get Open Orders
The caller’s currently open orders.
Authorizations
Short-lived (≤ 1h) bearer token from POST /auth/token.
Expiry is EXACT — there is no grace period past expires_in, on REST
or on the streaming transport. Refresh on a margin.
A structurally valid, unexpired token is still refused when it has been revoked (401), when the operator has invalidated the tokens the account was holding (401), or when the account is suspended (403). Suspension also blocks issuing a new one, so re-authenticating does not clear it.
Response
Open-orders snapshot.
GET /account response. Returns ONLY the caller's open orders — the
slice of account state the TEE legitimately holds (it tracks the
order_id→account map at intake). Balances and notes are intentionally
absent: linking an account to its notes needs the spending key, which
the TEE never sees. Clients derive balances + spendable notes themselves
from /tree/* + their own keys.