WineDirect Fulfillment API Gateway UAT 1.0 OAS 3.0
Download OpenAPI Specification
Detailed Documentation
Authentication
The API uses Bearer Token authentication. Every endpoint exceptPOST /api/v1/AccessToken requires an Authorization header.
Step 1: Request a bearer token
CallPOST /api/v1/AccessToken with your API user credentials in the JSON body. No Authorization header is required for this call. The Authorization: <api-key> field shown in the reference UI is a global placeholder. Leave it blank when generating a token.
payload field of the response.
Call
AccessToken no more than once every 8 hours and cache the returned token locally. Repeated calls may be rate-limited.Step 2: Use the token on subsequent calls
Pass the token frompayload as the Authorization header on every other endpoint, prefixed with Bearer :
Step 3: Verify or refresh the token
GET /api/v1/AccessToken/WhoAmI— test whether the current token is still valid. A failure means the token has expired and you should callAccessTokenagain.GET /api/v1/AccessToken/TokenDetails— check how long the current token has left before it expires.
From a browser
In the interactive API reference, click the Authorize button and enter the bearer token (including theBearer prefix) returned from AccessToken.