Integration essentials
Authentication
Never expose credentials in browser code.
- Send the
X-API-Keyheader with every request (schemeApiKeyAuth). API key issued per account. - Send an
Authorization: Bearer <token>header with every request (schemeBearerAuth). OAuth access token.
Requests
Use JSON request bodies and read JSON responses from https://api.bookstore.example.
Errors
Errors use standard HTTP status codes. Each operation below documents its error responses.
Rate limits
This is a demo deployment of a fictional API, so there are no real rate limits.
Versioning
This reference is generated from API version 1.2.3.
OpenAPI contract
The public OpenAPI contract is available at /periwinkle/openapi.json.
Authenticated request
# Requires the API key to be set in your shell environment.
curl https://api.bookstore.example/resource \
-H "X-API-Key: ${API_KEY}" \
-H "Content-Type: application/json"