Authentication - D-EDGE Docs

The Gift Shop API uses an API key for authentication. Send it in the X-API-KEY header on every request.

curl --request GET \
  --url 'https://{apiBaseUrl}/v1/{sessionId}/cart' \
  --header 'X-API-KEY: YOUR_API_KEY'

Get your credentials

D-EDGE issues your API key during the build step of the integration journey, after the partnership agreement. Credentials are not self-served. The key identifies your integration and grants access to the gift shops you integrate against. One key covers every endpoint of the API.

When authentication fails

A missing, invalid, or insufficient key returns 401 Unauthorized with a JSON error body. The same key can also be valid but not give access to a specific operation; that case returns 401 too. See Responses for the error format.

Keep your key safe

Call the API from your server, never from a browser or a mobile app: a key shipped to the client is public.
Store the key in your secret manager or environment variables, not in source code.
If a key leaks, contact us to rotate it.