REST API

The REST API reference describes the available endpoints for customizing the system. Essential information such as the resource path, descriptions of each operation, and samples of the request and response payloads is provided.

The Commerce+ REST API adheres to the OpenAPI 3.0 specification. Using Swagger, you can visualize and test these APIs in a user-friendly interface.

Security considerations

  • For security reasons, Swagger should not be exposed in your live production environment.

    You can restrict it from being exposed in the following ways:

    • If the REST API ports are not required to be exposed externally, ensure that they are blocked by your firewall rules. These ports include 5443, 9443, 8000, 30800, and 30900.
    • If you need to expose these ports:
      1. Disable the REST Discovery API for the Transaction server. For more information, see Enabling and disabling the REST Discovery API.
      2. Ensure that you configure your web server to block access to the following swagger endpoints:
        • https:///catalog/api/swagger-ui/index.html
        • https:///inventory/api/swagger-ui/index.html
        • https:///location/api/swagger-ui/index.html
        • https:///promotion/api/swagger-ui/index.html
        • https:///pricing/api/swagger-ui/index.html

Viewing Swagger specifications