FORTIS API:Public API
Public API for external consumers. Exposes catalog resources (categories and goods with variations), completed sales, point-of-sale terminal information, and employees.
Authentication: Bearer or other credentials are validated at the API gateway. Company scope
and authorization are derived from gateway context after successful authentication. Do not send a
separate company_id query parameter unless the gateway contract explicitly adds it.
Varied catalog items: Goods with multiple sellable configurations (including those managed as optioned
in internal/backoffice systems) are returned on /catalog/goods/regular as items with a variations
array — the same shape as other multi-variation goods; there is no separate optioned resource type in this API.
Authentication
- HTTP: Bearer Auth
JWT access token issued by the public authorization endpoints
(POST /auth/tokens / POST /auth/tokens/refresh). Pass it as
Authorization: Bearer <access_token>. Required for all operations
except the two OAuth2 token endpoints, which are public.
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | JWT |
License
Proprietary