Requirements

Only API methods via HTTPS POST are available for integration.
All requst and response bodies must be in JSON format.
No authentication is allowed. The API must be publicly accessible without any authentication or authorization. Request content authenticity can be verified using the X-Unify-Organization and X-Unify-Hmac-Sha256 headers.
All requests will contains 4 headers:
- X-Unify-Organization: The organization ID of the store that is making the request.
- X-Unify-Store-Code: The store code of the store that is making the request.
- X-Unify-Seller-Id: The unique identifier of the seller who made the request.
- X-Unify-Hmac-Sha256: The HMAC SHA256 hash of the request body, using the shared secret as the key.
API must respond with a 200 OK status code and within 2000ms.
API must be reachable from the UniFy StoreApp
No URL redirection will be followed.
No naming convention is required for the endpoints.