Authentication

{
  "name": "Production Integration",
  "permissions": [
    "customer:read",
    "customer:write", 
    "loyalty:read",
    "loyalty:write",
    "coupons:validate",
    "coupons:redeem"
  ],
  "rate_limit": 1000,
  "environment": "production"
}

curl -X GET "https://api.zupy.com/v1/loyalty/customers/search?whatsapp=+5511965958122" \
  -H "Authorization: Bearer zup_live_sk_1a2b3c4d5e6f7g8h9i0j" \
  -H "Content-Type: application/json"

{
  "error": "authentication_failed",
  "message": "Invalid or expired API key",
  "details": {
    "error_code": "INVALID_API_KEY",
    "documentation_url": "https://docs.zupy.com/authentication"
  }
}

class ZupyAPI {
  constructor(apiKey, baseUrl = 'https://api.zupy.com/v1') {
    this.apiKey = apiKey;
    this.baseUrl = baseUrl;
  }

  async makeRequest(endpoint, options = {}) {
    const url = `${this.baseUrl}${endpoint}`;
    
    const config = {
      ...options,
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
        ...options.headers,
      },
    };

    try {
      const response = await fetch(url, config);
      
      if (!response.ok) {
        const error = await response.json();
        throw new Error(`API Error: ${error.message}`);
      }
      
      return await response.json();
    } catch (error) {
      console.error('Zupy API Error:', error);
      throw error;
    }
  }

  // Example usage methods
  async searchCustomer(whatsapp) {
    return this.makeRequest(`/loyalty/customers/search?whatsapp=${encodeURIComponent(whatsapp)}`);
  }

  async validateCoupon(couponCode, orderData) {
    return this.makeRequest('/loyalty/validate-coupon', {
      method: 'POST',
      body: JSON.stringify({ coupon_code: couponCode, order: orderData })
    });
  }
}

// Usage
const zupy = new ZupyAPI(process.env.ZUPY_API_KEY);

async function makeRequestWithRetry(apiCall, maxRetries = 3) {
  for (let attempt = 0; attempt <= maxRetries; attempt++) {
    try {
      return await apiCall();
    } catch (error) {
      if (error.status === 429 && attempt < maxRetries) {
        // Exponential backoff: 2^attempt seconds + jitter
        const delay = Math.pow(2, attempt) * 1000 + Math.random() * 1000;
        console.log(`Rate limited. Retrying in ${delay}ms...`);
        await new Promise(resolve => setTimeout(resolve, delay));
        continue;
      }
      throw error;
    }
  }
}

# Test API key validity
curl -X GET "https://api.zupy.com/v1/auth/verify" \
  -H "Authorization: Bearer YOUR_API_KEY"

# Expected response for valid key
{
  "authenticated": true,
  "key_id": "key_abc123def456",
  "permissions": ["customer:read", "loyalty:read"],
  "rate_limit": {
    "limit": 1000,
    "remaining": 999,
    "reset_at": "2025-09-04T11:30:00Z"
  }
}