Update delete route response.

src/contract_check/api/routes/README.md

@@ -329,7 +329,7 @@ navigator.credentials.get()...} }`; ответ — access JWT (см. ниже).
 
 Список — массив `{ id, credentialID, credentialPublicKey, counter, userId,
 deviceName, createdAt }`, новые первыми. Удаление чужого/несуществующего —
-`404`, успех — `{ "ok": true }`.
+`404`, успех — `204 No Content` (пустое тело).
 
 #### `POST /api/v1/auth/magic-link/request` / `verify`
 

src/contract_check/api/routes/auth/passkeys.py

@@ -18,7 +18,6 @@ from src.contract_check.api.deps import (
 )
 from src.contract_check.api.routes.auth.support import _issue_single_token, _require_passkey_enabled
 from src.contract_check.api.schemas import (
-    OkResponse,
     PasskeyAuthenticateFinishRequest,
     PasskeyAuthenticationOptions,
     PasskeyCredentialPublic,
@@ -244,14 +243,13 @@ async def passkeys_list(
 
 @router.delete(
     "/passkeys/{passkey_id}",
-    response_model=OkResponse,
-    status_code=status.HTTP_200_OK,
+    status_code=status.HTTP_204_NO_CONTENT,
 )
 async def passkeys_delete(
     user: CurrentUserDep,
     session: AsyncSessionDep,
     passkey_id: uuid.UUID,
-) -> OkResponse:
+) -> None:
     """Remove one of the user's passkeys. Scoped to the owning user."""
     _require_passkey_enabled()
 
@@ -260,4 +258,3 @@ async def passkeys_delete(
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="passkey not found")
     await session.commit()
     log.info("passkey_deleted", user_id=str(user.user_id), passkey_id=str(passkey_id))
-    return OkResponse(ok=True, detail="passkey deleted")

tests/integration/test_passkeys_magic_link.py

@@ -207,8 +207,8 @@ async def test_passkey_list_and_delete(
     assert items[0]["userId"] == user_id
 
     deleted = await client.delete(f"/api/v1/auth/passkeys/{passkey_row_id}", headers=headers)
-    assert deleted.status_code == 200
-    assert deleted.json()["ok"] is True
+    assert deleted.status_code == 204
+    assert deleted.content == b""
 
     gone = await client.delete(f"/api/v1/auth/passkeys/{passkey_row_id}", headers=headers)
     assert gone.status_code == 404