iRetail PRO store node 1.0.0-m1: approvals
1 операция
← Вся документация · Источник: контракты, openapi/store-v1.yaml на коммите 8000474.
Справочники на английском — на языке контрактов, из которых они созданы.
← iRetail PRO store node 1.0.0-m1
Операции
POST
/v1/approvals
A senior employee's one-time approval for a permission in this context (spec/RBAC.md).
From a workplace only, a register's, a handheld's or a back office's token or an employee's session on one (403 forbidden, details principal workplace, otherwise); the approver's PIN counts in that device's attempts (429 too_many_requests). The token covers one request within 60 seconds for the same permission, store, workplace and a value no higher; one approved without a value covers only a request without one.
operationId
approve
Параметры
| Имя | Где | Тип | Описание |
|---|---|---|---|
IRetail-App
|
header | string |
Which app sends the request, at which version: <app>/<version>, optionally a space and (<platform>), as cashier/1.2.0 (windows-x64) or manager/1.2.0 (web). The register (cashier), the back office and the console (manager) and the device gateway (gateway) send it on every request; a request without it is not one of the apps and is served as the current API, and a device token of an app's kind without it is an app of an unknown version; a header that does not parse counts as absent. The node may refuse an app 426 app_update_required by it, except on the operations marked x-app-update-exempt. Not a security boundary (spec/API.md, Transport; spec/RELEASES.md, Who is asking). |
Тело запроса обязательный
application/jsonApprovalRequest
Ответы
Схемы
Error object
Every error response.
error обязательный
|
string |
Stable code, see spec/API.md. |
message обязательный
|
string |
English text for logs. |
details
|
object |
Principal object
kind обязательный
|
"employee" | "device" | "integration" |
|
id обязательный
|
string (uuid) |
|
display_name обязательный
|
string |
ApprovalRequest object
login обязательный
|
string |
|
pin обязательный
|
string |
|
permission обязательный
|
string |
|
value
|
integer (int64) |
Approval object
approval_token обязательный
|
string |
One-time, send as Approval-Token. |
expires_at обязательный
|
string (date-time) |
|
approver обязательный
|
Principal |