Rewards
Create a widget signing key; the secret is returned once (scope: rewards:write)
POST
bearerAuthheader
AuthorizationBearer <token>API key as Bearer token
application/json- body
allowedOrigins*array<>Items
1 <= items <= 20OK
application/json- response
data*secret is returned ONLY by the create call. Keep it on your server.
error*nullcurl -X POST "https://example.com/rewards/widget-keys" \ -H "Content-Type: application/json" \ -d '{ "allowedOrigins": [ "http://example.com" ] }'{ "data": { "kid": "string", "secret": "string", "programKey": "string", "allowedOrigins": [ "string" ], "createdAt": "2019-08-24T14:15:22Z" }, "error": null}Redeem a catalogue item for a member; units are burnt at once, above the auto-approve threshold the redemption waits for your approval. 409 insufficient_units / in_debt (scope: rewards:write) POST
Previous Page
PUBLIC (no API key): exchange a host-signed token for a 15-minute read-only session. Each token works once (jti); CORS limited to the key's allowedOrigins POST
Next Page