Partners are issued an API key, which they can use to fetch a token via ExchangeApiKey. This returns a short-lived token used as a bearer token on all subsequent requests for that session. The PartnerAuthIngressService exposes unauthenticated endpoints; all other services require the auth token, and may also require scope-specific identity headers.
Authorization: Bearer <token>Exchanges a Partner API key for a Partner JWT to be used in the Headers of each request.
service PartnerAuthIngressService {
rpc ExchangeApiKey(ExchangeApiKeyRequest) returns (ExchangeApiKeyResponse);
}
message ExchangeApiKeyRequest {
string api_key = 1;
}
message ExchangeApiKeyResponse {
string auth_token = 1;
int64 expires_at_ms = 2;
}Returns information about the authenticated partner.
service PartnerAuthIngressService {
rpc GetSelf(GetSelfRequest) returns (GetSelfResponse);
}
message GetSelfRequest {}
message GetSelfResponse {
string partner_uuid = 1;
string partner_name = 2;
}