Acme Customer Portal — API reference

Endpoints

POST /api/login            {username, password}          -> {token, role}
GET  /api/orders/<id>       (auth)                        -> order
GET  /api/invoices/<id>     (auth)                        -> invoice
GET  /api/admin/users      (admin console)               -> staff directory
GET  /api/admin/audit      (admin console)               -> audit log
POST /api/user/update      {display_name, role?, ...}    -> update your profile
POST /api/comments         {author, text}                -> post a comment
GET  /comments                                           -> community board
GET  /api/fetch?url=       (webhook tester)              -> server-side fetch
GET  /api/admin/secrets    (role must be admin)          -> admin-only data
GET  /api/debug            (diagnostics)                 -> runtime config

Getting started

Use your sandbox test account to authenticate:

test_low / TestPass123  (role: customer)

Authenticate against POST /api/login, then call the endpoints above with your token. Access is scoped to your account's role.