Saltar al contenido principal

Partner Management Features

Operational APIs used by authenticated partner organizations after onboarding.

1. Settings (/api/partner-settings)​

  • GET /api/partner-settings
  • PATCH /api/partner-settings/profile
  • PATCH /api/partner-settings/business
  • PATCH /api/partner-settings/branding
  • POST /api/partner-settings/api-keys/regenerate
  • PATCH /api/partner-settings/api
  • PATCH /api/partner-settings/notifications
  • PATCH /api/partner-settings/billing
  • GET /api/partner-settings/commission
  • PATCH /api/partner-settings/commission

2. Users (/api/partners/users)​

  • POST /api/partners/users
  • GET /api/partners/users
  • GET /api/partners/users/statistics
  • GET /api/partners/users/:userId
  • PATCH /api/partners/users/:userId
  • DELETE /api/partners/users/:userId
  • POST /api/partners/users/invite
  • GET /api/partners/users/:userId/permissions
  • POST /api/partners/users/:userId/update-access

3. Reports (/api/partner-reports)​

  • GET /api/partner-reports/revenue
  • GET /api/partner-reports/performance
  • GET /api/partner-reports/top-destinations
  • GET /api/partner-reports/daily-revenue
  • GET /api/partner-reports/monthly-trend
  • GET /api/partner-reports/commission
  • GET /api/partner-reports/cenote-comparison

4. Reservations (/api/partner-reservations)​

  • GET /api/partner-reservations
  • GET /api/partner-reservations/stats
  • GET /api/partner-reservations/:id
  • POST /api/partner-reservations
  • PATCH /api/partner-reservations/:id
  • POST /api/partner-reservations/:id/cancel

5. Webhooks (/api/partners/webhooks)​

  • POST /api/partners/webhooks/test — partner JWT + permissions (partner.manage_settings); endpoint de prueba del partner
  • POST /api/partners/webhooks/trigger — solo ADMIN (@Roles(ADMIN)); distinto del endpoint de prueba del partner arriba

6. Sandbox (/api/partner-sandbox) — live​

información

Sandbox está live cuando existe el schema partners_sandbox (migración v23.0.62+). Requiere una API key sandbox sk_test_. Estas claves no son válidas en rutas de producción /api/partner/* (sandbox_key_not_allowed_on_production_api).

  • POST /api/partner-sandbox/generate-data
  • GET /api/partner-sandbox/statistics
  • DELETE /api/partner-sandbox/cleanup

7. Webhook simulator (/api/partner/webhooks/simulator) — live​

Requiere clave sandbox sk_test_ (misma restricción de API de producción que §6).

  • POST /api/partner/webhooks/simulator/simulate
  • POST /api/partner/webhooks/simulator/simulate-batch
  • POST /api/partner/webhooks/simulator/test-endpoint
  • GET /api/partner/webhooks/simulator/history

Notes​

  • these routes are not part of the public API-key partner integration layer
  • most of them require JWT + partner context or additional permissions
  • reports and reservation statistics expose monetary values in cents at API contract level
  • POST /api/partner-settings/api-keys/regenerate once-reveals apiKey only (auth is JWT + partner roles/permissions; no functional x-api-secret)