Get connector runtime configuration
const url = 'http://localhost:8080/v1/connector/config';const options = { method: 'GET', headers: { 'X-Antares-Environment-Fingerprint': 'example', Authorization: 'Bearer <token>' }};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url http://localhost:8080/v1/connector/config \ --header 'Authorization: Bearer <token>' \ --header 'X-Antares-Environment-Fingerprint: example'Everything the deliberately thin connector needs to do its job without a second source of truth: which channels and languages exist, which currencies each channel assigns, and which price-context signing generation to mint tokens with. Polled at most every five minutes, which is also the upper bound on how long a key rotation takes to reach the storefront.
Authorizations
Abschnitt betitelt „Authorizations“Parameters
Abschnitt betitelt „Parameters“Header Parameters
Abschnitt betitelt „Header Parameters“SHA-256 over the shop’s APP_URL plus its platform version. APP_URL lives in .env and is not carried by a database dump, which is exactly why it is the discriminator between a production install and a clone of it.
Responses
Abschnitt betitelt „Responses“Configuration required by the deliberately thin connector.
object
The Antares shop UUID in canonical lower-case dashed form. The connector treats it as an opaque string and feeds it verbatim into the HKDF info string when it derives the price-context signing secret, so any reformatting would change the derived key.
object
The sales channel id as the platform spells it.
The Antares channel key the connector puts into every envelope.
The locales mapped for this channel, ^[a-z]{2}-[A-Z]{2}$.
Upper-case ISO 4217 code.
Every currency this channel assigns, defaultCurrency first. This is the exact list an envelope’s currencies must carry.
The origins the widget may be embedded on, so the connector can warn a merchant whose storefront domain is not registered instead of leaving them with a silent 403 origin_not_allowed.
The channel’s pk_live_…. Returned on every poll so a connector that lost its local copy — a fresh install against an existing shop, a restored backup — can reconfigure the storefront without a new pairing.
Absolute URL of the widget loader script the connector injects into the storefront.
The union of every currency assigned across the shop’s channels, the shop’s own default currency first. Per-channel assignment is on ConnectorChannel, which is what a connector building an envelope must use; this list exists so a connector can decide once whether it has to resolve prices in more than one currency at all.
Which signing-secret generation the storefront must mint price-context tokens with. The connector derives the secret itself with HKDF-SHA-256 from the sk it holds; the API never sends it. Picking a new generation up on the next poll — at most five minutes — is what makes a key rotation invisible to shoppers.
object
The active generation. The API also accepts tokens signed with a generation retired less than 26 hours ago, which is the 24-hour maximum token lifetime plus margin.
The key identifier to put into the token’s kid claim, derived from public inputs only as the first 8 hex characters of SHA-256("antares:price-context-kid:v1|{shopId}|{generation}").
The MAC algorithm. Only one is defined for token format version 1.
Example
{ "channels": [ { "defaultCurrency": "EUR", "currencies": [ "EUR" ] } ], "maxBatchSize": 500, "supportedCurrencies": [ "EUR" ], "priceContext": { "algorithm": "HMAC-SHA-256" }}contract_validation_failed — the OpenAPI request validator rejected the request before the handler ran — or invalid_request when the body is unreadable or is not valid JSON for the declared operation.
RFC 9457 problem details. type is always https://api.antares.commergy.de/problems/{code} and is built in exactly one place. type, code and title are stable and never localised; only detail is localised, and only where the registry marks the audience as merchant.
object
Absolute problem type URI. Stable identifier, never localised.
Stable English summary of the problem type.
The HTTP status code, repeated in the body.
Human-readable explanation of this occurrence. The only localised field; may be German or English depending on Accept-Language.
The request path this occurrence relates to.
The registry code, for example price_context_token_expired. This is what a client branches on; never branch on title or detail.
Present only for per-item validation failures, above all ingest batches.
object
Dotted path of the offending field inside the request body, for example prices.CHF.gross.
What is wrong with it, in English.
0-based index into the request’s products array. Present only for ingest batches, and the only way to map an error back to a product without echoing it.
Examplegenerated
{ "type": "example", "title": "example", "status": 1, "detail": "example", "instance": "example", "code": "example", "errors": [ { "field": "example", "message": "example", "productIndex": 1 } ]}unauthorized — the credential is missing, malformed, unknown or revoked. For /v1/admin this also covers an actor JWS that fails signature, exp or kid verification, and a kid that no key in the panel’s JWKS matches.
RFC 9457 problem details. type is always https://api.antares.commergy.de/problems/{code} and is built in exactly one place. type, code and title are stable and never localised; only detail is localised, and only where the registry marks the audience as merchant.
object
Absolute problem type URI. Stable identifier, never localised.
Stable English summary of the problem type.
The HTTP status code, repeated in the body.
Human-readable explanation of this occurrence. The only localised field; may be German or English depending on Accept-Language.
The request path this occurrence relates to.
The registry code, for example price_context_token_expired. This is what a client branches on; never branch on title or detail.
Present only for per-item validation failures, above all ingest batches.
object
Dotted path of the offending field inside the request body, for example prices.CHF.gross.
What is wrong with it, in English.
0-based index into the request’s products array. Present only for ingest batches, and the only way to map an error back to a product without echoing it.
Examplegenerated
{ "type": "example", "title": "example", "status": 1, "detail": "example", "instance": "example", "code": "example", "errors": [ { "field": "example", "message": "example", "productIndex": 1 } ]}environment_mismatch — X-Antares-Environment-Fingerprint differs from the value bound at connect. Ingest and orders stay blocked until the merchant resolves it through POST /v1/admin/shops/{shopId}/environment.
RFC 9457 problem details. type is always https://api.antares.commergy.de/problems/{code} and is built in exactly one place. type, code and title are stable and never localised; only detail is localised, and only where the registry marks the audience as merchant.
object
Absolute problem type URI. Stable identifier, never localised.
Stable English summary of the problem type.
The HTTP status code, repeated in the body.
Human-readable explanation of this occurrence. The only localised field; may be German or English depending on Accept-Language.
The request path this occurrence relates to.
The registry code, for example price_context_token_expired. This is what a client branches on; never branch on title or detail.
Present only for per-item validation failures, above all ingest batches.
object
Dotted path of the offending field inside the request body, for example prices.CHF.gross.
What is wrong with it, in English.
0-based index into the request’s products array. Present only for ingest batches, and the only way to map an error back to a product without echoing it.
Examplegenerated
{ "type": "example", "title": "example", "status": 1, "detail": "example", "instance": "example", "code": "example", "errors": [ { "field": "example", "message": "example", "productIndex": 1 } ]}rate_limit_exceeded — the per-key or per-IP token bucket is exhausted.
RFC 9457 problem details. type is always https://api.antares.commergy.de/problems/{code} and is built in exactly one place. type, code and title are stable and never localised; only detail is localised, and only where the registry marks the audience as merchant.
object
Absolute problem type URI. Stable identifier, never localised.
Stable English summary of the problem type.
The HTTP status code, repeated in the body.
Human-readable explanation of this occurrence. The only localised field; may be German or English depending on Accept-Language.
The request path this occurrence relates to.
The registry code, for example price_context_token_expired. This is what a client branches on; never branch on title or detail.
Present only for per-item validation failures, above all ingest batches.
object
Dotted path of the offending field inside the request body, for example prices.CHF.gross.
What is wrong with it, in English.
0-based index into the request’s products array. Present only for ingest batches, and the only way to map an error back to a product without echoing it.
Examplegenerated
{ "type": "example", "title": "example", "status": 1, "detail": "example", "instance": "example", "code": "example", "errors": [ { "field": "example", "message": "example", "productIndex": 1 } ]}Headers
Abschnitt betitelt „Headers“Seconds until the bucket refills enough for one request.
internal_error — unhandled failure. detail is always generic; the cause goes to the log with a correlation id.
RFC 9457 problem details. type is always https://api.antares.commergy.de/problems/{code} and is built in exactly one place. type, code and title are stable and never localised; only detail is localised, and only where the registry marks the audience as merchant.
object
Absolute problem type URI. Stable identifier, never localised.
Stable English summary of the problem type.
The HTTP status code, repeated in the body.
Human-readable explanation of this occurrence. The only localised field; may be German or English depending on Accept-Language.
The request path this occurrence relates to.
The registry code, for example price_context_token_expired. This is what a client branches on; never branch on title or detail.
Present only for per-item validation failures, above all ingest batches.
object
Dotted path of the offending field inside the request body, for example prices.CHF.gross.
What is wrong with it, in English.
0-based index into the request’s products array. Present only for ingest batches, and the only way to map an error back to a product without echoing it.
Examplegenerated
{ "type": "example", "title": "example", "status": 1, "detail": "example", "instance": "example", "code": "example", "errors": [ { "field": "example", "message": "example", "productIndex": 1 } ]}