Authentification

Bouspam uses a token-based authentication system. Before making any API call, you must exchange your credentials for a short-lived access token and include it in every subsequent request.

POST /api/merchant/token/

//json body

{
  "merchant_id": "your-merchant-id",  //required
  "secret_key": "your-secret-key"    //required
}

Response

// json
{
  "success": true,
  "data": {
    "token": "eyJ...",
    "expires_at": "2025-03-15T12:00:00+00:00",
    "merchant": {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "name": "My Business"
    }
  }
}

A token is a temporary credential that proves your identity to the API. It is valid until expires_at, after which you must request a new one.