Cancel Order (Web v1)

DELETE /v1/orders/{order_id}

Web v1 native — counterpart to Web v1 place-order.

Auth: Authorization: Bearer <session_token> (see place-order). The order must belong to the session's user — there is no user_id parameter.

Request

DELETE /v1/orders/{order_id}
Authorization: Bearer <session_token>

order_id is the UUID returned by place-order (32-hex or hyphenated form both accepted). Returns 204 No Content on success.

Errors (plain-text body): 400 malformed UUID, 401 missing/invalid session token, 403 order belongs to a different user (not order owner), 404 order not found or already filled, 503 trading service down, 504 trading service timeout.