Authentication depends on the API feature you are using and the
@preezie/widget-sdk.
Use the SDK with your API key to obtain the short-lived operation token, then
include that token in requests to the Core Intent API. Contact your preezie Customer Success Manager to obtain your API key. The key can be rotated when needed.
Core Intent API
Core Intent requests require both of the following headers:
The operation token returned by the SDK is a short-lived HS256 JWT. Its
tenantId claim must exactly match the Tenantid request header.
Keep your API key secure and never expose it in public repositories, logs, or
support messages. Use the SDK to obtain operation tokens rather than minting
them directly.
Missing, expired, incorrectly signed, or tenant-mismatched tokens return 401 Unauthorized.
FAQs and Highlights
FAQ and Highlights requests require only your tenant identifier:
The tenant identifier selects the catalogue containing the requested product. Send it with every request to GET /api/faqs/{productId} and GET /api/highlights/{productId}.
Next step
After obtaining credentials, follow the Quickstart to make your first request.