Create an order-management link

Create a short-lived order-management handoff link for an attributed order.

POST /api/partner/orders/manage-link/

The request must be authenticated with the Partner API HMAC scheme described in the Partner API overview.

Request body

{
  "partner_user_id": "customer-42",
  "transaction_id": "transaction-id"
}

The transaction must belong to the partner user and satisfy the partner’s venue scope. The endpoint returns 201:

{
  "manage_url": "https://www.showpass.com/account/partner-login/opaque-code/",
  "expires_in_seconds": 120
}

The link expires after 120 seconds. It can be used once. The code is stored as a hash and cannot be reused after it is consumed or expires.

Using the link

The manage_url is a browser handoff route:

GET /account/partner-login/<code>/

When the code is valid, Showpass consumes it, creates a short-lived order-scoped session, and redirects the customer to the order page. The route does not return the order data directly.

An invalid, expired, already-used, or out-of-scope link redirects the customer to the Showpass login page:

/accounts/login/?next=/account/my-orders/

The request returns 403 when the order is outside the partner’s venue scope, and 409 when the partner user or order cannot be found or the partner user is inactive. Validation errors return 400 and authentication failures return 403.