🔐 Authorization

Blend includes a Bearer token in the Authorization header of every request made to the Manual POS. This endpoint is not called directly, but the token must be validated by the Manual POS before processing any incoming request.

Endpoint: POST /api/login

Description: Authenticate and return an access token for secured communication.

📦 Example Request

{
  "email": "[email protected]",
  "password": "your_password"
}

🧾 Response POS

✅ Success

{
  "access_token": "Bearer eyJ..."
}

❌ Failure

{
  "status": "Credentials do not match"
}

• A failed response usually means the order wasn't found or validation failed

✅ Notes

• Token format is: Bearer "ssss"
• The token should be stored and configured per brand or environment.
• If the token is invalid or missing, return a 401 Unauthorized response to Blend.
• There is no separate authentication call — this is a token-based validation per request.