API referenceV1

Issue a fresh respondent token, invalidating the old one

Authorization

AuthorizationBearer <token>

A server-side secret key. Never send one from a browser — a request carrying an Origin header is refused for this reason.

In: header

sid*string

curl -X POST "https://example.com/v1/sessions/string/token/rotate"

{  "respondentToken": "string",  "rotatedAt": 0}

Re-check a checkout with the gateway, and settle it if it was paid

Confirm an upload: flips pending to confirmed and notifies the session