I’d start with this example by @nomeata, and see if that helps you. You should be able to update state from a properly defined call, you just have to think about the implications of other actors hitting that endpoint (e.g. ensure that the logic is always canister-side, and doesn’t take parameters from the unauthenticated call).
1 Like