Fixed

Send your access token in the X-Yotpo-Token header

The API reference said to send your access token as Authorization: Bearer. The API doesn't read that header, so those requests failed with 401 "The access token is missing". Send the token in the X-Yotpo-Token header instead. Try It on every reference page now does this.

Other fixes in the reference:

  • Every endpoint that needs a token now documents its 401 responses: invalid_request when no token was sent, invalid_token when the token is wrong, revoked or expired.
  • The store-level webhook subscription endpoints now take store_id in the path, so Try It and the code samples build the right URL.
  • Retrieve Orders documents its limit parameter correctly (1 to 100).
  • Retrieve Q&A for a product, Retrieve the bottom line for Q&A, Vote on answers, Photos by album and Product images now have full parameters, Try It and example responses.
  • Fixed broken links across the guides and reference, including every link to the Yotpo Help Center.

Endpoints affected: all authenticated endpoints; Create, Retrieve, Update and Delete store subscription; Retrieve Orders; the five Q&A and Visual UGC pages above.