[{"data":1,"prerenderedAt":759},["ShallowReactive",2],{"navigation_docs_zh":3,"-zh-getting-started-enterprise-integration":340,"-zh-getting-started-enterprise-integration-surround":754},[4,22,40,50,64,82,312,326],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":21},"快速开始","i-lucide-rocket","\u002Fzh\u002Fgetting-started","zh\u002F1.getting-started",[10,13,17],{"title":5,"path":11,"stem":12},"\u002Fzh\u002Fgetting-started\u002Fquick-start","zh\u002F1.getting-started\u002F1.quick-start",{"title":14,"path":15,"stem":16},"信任模型","\u002Fzh\u002Fgetting-started\u002Ftrust-model","zh\u002F1.getting-started\u002F2.trust-model",{"title":18,"path":19,"stem":20},"大客户端到端接入指南","\u002Fzh\u002Fgetting-started\u002Fenterprise-integration","zh\u002F1.getting-started\u002F3.enterprise-integration",false,{"title":23,"icon":24,"path":25,"stem":26,"children":27,"page":21},"自研 Storefront","i-lucide-store","\u002Fzh\u002Fstorefront","zh\u002F2.storefront",[28,32,36],{"title":29,"path":30,"stem":31},"第三方 Storefront","\u002Fzh\u002Fstorefront\u002Fthird-party-storefront","zh\u002F2.storefront\u002F1.third-party-storefront",{"title":33,"path":34,"stem":35},"Turnstile 的信任边界","\u002Fzh\u002Fstorefront\u002Fchallenge-and-turnstile","zh\u002F2.storefront\u002F2.challenge-and-turnstile",{"title":37,"path":38,"stem":39},"第三方店铺前端公共 API","\u002Fzh\u002Fstorefront\u002Fpublic-api","zh\u002F2.storefront\u002F3.public-api",{"title":41,"icon":42,"path":43,"stem":44,"children":45,"page":21},"OAuth 与身份","i-lucide-key-round","\u002Fzh\u002Foauth","zh\u002F3.oauth",[46],{"title":47,"path":48,"stem":49},"第三方账号授权安全边界","\u002Fzh\u002Foauth\u002Fauthorization-code-pkce","zh\u002F3.oauth\u002F1.authorization-code-pkce",{"title":51,"icon":52,"path":53,"stem":54,"children":55,"page":21},"开发者平台","i-lucide-blocks","\u002Fzh\u002Fplatform","zh\u002F4.platform",[56,60],{"title":57,"path":58,"stem":59},"应用、版本、安装与 Scope","\u002Fzh\u002Fplatform\u002Fapps-installations-scopes","zh\u002F4.platform\u002F1.apps-installations-scopes",{"title":61,"path":62,"stem":63},"Origin、Redirect、反向代理与环境","\u002Fzh\u002Fplatform\u002Fsecurity-and-environments","zh\u002F4.platform\u002F2.security-and-environments",{"title":65,"icon":66,"path":67,"stem":68,"children":69,"page":21},"运行时扩展","i-lucide-workflow","\u002Fzh\u002Fruntime","zh\u002F5.runtime",[70,74,78],{"title":71,"path":72,"stem":73},"安装级 Webhook","\u002Fzh\u002Fruntime\u002Fwebhooks","zh\u002F5.runtime\u002F1.webhooks",{"title":75,"path":76,"stem":77},"库存同步","\u002Fzh\u002Fruntime\u002Finventory-sync","zh\u002F5.runtime\u002F2.inventory-sync",{"title":79,"path":80,"stem":81},"自动发货 Provider","\u002Fzh\u002Fruntime\u002Fauto-fulfillment","zh\u002F5.runtime\u002F3.auto-fulfillment",{"title":83,"icon":84,"path":85,"stem":86,"children":87,"page":21},"API 参考","i-lucide-braces","\u002Fzh\u002Freference","zh\u002F6.reference",[88,91,95],{"title":83,"path":89,"stem":90},"\u002Fzh\u002Freference\u002Fapi","zh\u002F6.reference\u002F1.api",{"title":92,"path":93,"stem":94},"错误、幂等与限流","\u002Fzh\u002Freference\u002Ferrors-and-limits","zh\u002F6.reference\u002F2.errors-and-limits",{"title":96,"path":97,"stem":98,"children":99,"page":21},"Endpoint 目录","\u002Fzh\u002Freference\u002Foperations","zh\u002F6.reference\u002F3.operations",[100,104,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176,180,184,188,192,196,200,204,208,212,216,220,224,228,232,236,240,244,248,252,256,260,264,268,272,276,280,284,288,292,296,300,304,308],{"title":101,"path":102,"stem":103},"读取公开站点启动配置","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-bootstrap","zh\u002F6.reference\u002F3.operations\u002F01.get-public-bootstrap",{"title":105,"path":106,"stem":107},"读取公开分类","\u002Fzh\u002Freference\u002Foperations\u002Flist-public-categories","zh\u002F6.reference\u002F3.operations\u002F02.list-public-categories",{"title":109,"path":110,"stem":111},"读取店铺公开商品详情","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-merchant-product","zh\u002F6.reference\u002F3.operations\u002F03.get-public-merchant-product",{"title":113,"path":114,"stem":115},"读取店铺公开分类","\u002Fzh\u002Freference\u002Foperations\u002Flist-public-merchant-categories","zh\u002F6.reference\u002F3.operations\u002F04.list-public-merchant-categories",{"title":117,"path":118,"stem":119},"读取店铺公开商品","\u002Fzh\u002Freference\u002Foperations\u002Flist-public-merchant-products","zh\u002F6.reference\u002F3.operations\u002F05.list-public-merchant-products",{"title":121,"path":122,"stem":123},"读取公开店铺资料","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-merchant","zh\u002F6.reference\u002F3.operations\u002F06.get-public-merchant",{"title":125,"path":126,"stem":127},"按 slug 读取公开商品","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-product","zh\u002F6.reference\u002F3.operations\u002F07.get-public-product",{"title":129,"path":130,"stem":131},"读取公开商品目录","\u002Fzh\u002Freference\u002Foperations\u002Flist-public-products","zh\u002F6.reference\u002F3.operations\u002F08.list-public-products",{"title":133,"path":134,"stem":135},"按语言读取当前已发布法律正文","\u002Fzh\u002Freference\u002Foperations\u002Flist-public-legal-documents","zh\u002F6.reference\u002F3.operations\u002F09.list-public-legal-documents",{"title":137,"path":138,"stem":139},"读取官方授权确认事实","\u002Fzh\u002Freference\u002Foperations\u002Fdescribe-oauth-authorization","zh\u002F6.reference\u002F3.operations\u002F10.describe-oauth-authorization",{"title":141,"path":142,"stem":143},"撤销当前 DPoP token family","\u002Fzh\u002Freference\u002Foperations\u002Frevoke-oauth-token","zh\u002F6.reference\u002F3.operations\u002F11.revoke-oauth-token",{"title":145,"path":146,"stem":147},"以 PKCE 或轮换 refresh token 交换 DPoP token","\u002Fzh\u002Freference\u002Foperations\u002Fexchange-oauth-token","zh\u002F6.reference\u002F3.operations\u002F12.exchange-oauth-token",{"title":149,"path":150,"stem":151},"通过 API Key 读取公开分类","\u002Fzh\u002Freference\u002Foperations\u002Flist-api-key-catalog-categories","zh\u002F6.reference\u002F3.operations\u002F13.list-api-key-catalog-categories",{"title":153,"path":154,"stem":155},"通过 API Key 读取公开商品","\u002Fzh\u002Freference\u002Foperations\u002Fget-api-key-catalog-product","zh\u002F6.reference\u002F3.operations\u002F14.get-api-key-catalog-product",{"title":157,"path":158,"stem":159},"通过 API Key 读取公开商品目录","\u002Fzh\u002Freference\u002Foperations\u002Flist-api-key-catalog-products","zh\u002F6.reference\u002F3.operations\u002F15.list-api-key-catalog-products",{"title":161,"path":162,"stem":163},"取消尚未进入不可逆支付阶段的托管结账","\u002Fzh\u002Freference\u002Foperations\u002Fcancel-hosted-checkout-session","zh\u002F6.reference\u002F3.operations\u002F16.cancel-hosted-checkout-session",{"title":165,"path":166,"stem":167},"读取绑定安装的托管结账状态","\u002Fzh\u002Freference\u002Foperations\u002Fget-hosted-checkout-session","zh\u002F6.reference\u002F3.operations\u002F17.get-hosted-checkout-session",{"title":169,"path":170,"stem":171},"创建服务端重算的托管结账会话","\u002Fzh\u002Freference\u002Foperations\u002Fcreate-hosted-checkout-session","zh\u002F6.reference\u002F3.operations\u002F18.create-hosted-checkout-session",{"title":173,"path":174,"stem":175},"创建官方托管登录流程","\u002Fzh\u002Freference\u002Foperations\u002Finitiate-hosted-login","zh\u002F6.reference\u002F3.operations\u002F19.initiate-hosted-login",{"title":177,"path":178,"stem":179},"以 PKCE 单次消费托管登录返回码","\u002Fzh\u002Freference\u002Foperations\u002Fconsume-hosted-login-return","zh\u002F6.reference\u002F3.operations\u002F20.consume-hosted-login-return",{"title":181,"path":182,"stem":183},"读取当前 API Key 的标识与 scope","\u002Fzh\u002Freference\u002Foperations\u002Fget-api-key-identity","zh\u002F6.reference\u002F3.operations\u002F21.get-api-key-identity",{"title":185,"path":186,"stem":187},"读取安装级凭据绑定身份","\u002Fzh\u002Freference\u002Foperations\u002Fget-installation-credential-identity","zh\u002F6.reference\u002F3.operations\u002F22.get-installation-credential-identity",{"title":189,"path":190,"stem":191},"读取安装级凭据就绪与阻塞事实","\u002Fzh\u002Freference\u002Foperations\u002Fget-installation-credential-readiness","zh\u002F6.reference\u002F3.operations\u002F23.get-installation-credential-readiness",{"title":193,"path":194,"stem":195},"校验并保存购物车短期地址令牌","\u002Fzh\u002Freference\u002Foperations\u002Fset-public-cart-address","zh\u002F6.reference\u002F3.operations\u002F24.set-public-cart-address",{"title":197,"path":198,"stem":199},"生成配送税费优惠统一结算报价","\u002Fzh\u002Freference\u002Foperations\u002Fquote-public-cart-checkout","zh\u002F6.reference\u002F3.operations\u002F25.quote-public-cart-checkout",{"title":201,"path":202,"stem":203},"由购物车创建官方托管结账会话","\u002Fzh\u002Freference\u002Foperations\u002Fcheckout-public-cart","zh\u002F6.reference\u002F3.operations\u002F26.checkout-public-cart",{"title":205,"path":206,"stem":207},"清空公开购物车","\u002Fzh\u002Freference\u002Foperations\u002Fclear-public-cart","zh\u002F6.reference\u002F3.operations\u002F27.clear-public-cart",{"title":209,"path":210,"stem":211},"移除公开购物车 SKU","\u002Fzh\u002Freference\u002Foperations\u002Fremove-public-cart-item","zh\u002F6.reference\u002F3.operations\u002F28.remove-public-cart-item",{"title":213,"path":214,"stem":215},"更新公开购物车 SKU 数量","\u002Fzh\u002Freference\u002Foperations\u002Fupdate-public-cart-item-quantity","zh\u002F6.reference\u002F3.operations\u002F29.update-public-cart-item-quantity",{"title":217,"path":218,"stem":219},"向公开购物车添加 SKU","\u002Fzh\u002Freference\u002Foperations\u002Fadd-public-cart-item","zh\u002F6.reference\u002F3.operations\u002F30.add-public-cart-item",{"title":221,"path":222,"stem":223},"移除购物车优惠码","\u002Fzh\u002Freference\u002Foperations\u002Fremove-public-cart-promotion","zh\u002F6.reference\u002F3.operations\u002F31.remove-public-cart-promotion",{"title":225,"path":226,"stem":227},"校验并应用购物车优惠码","\u002Fzh\u002Freference\u002Foperations\u002Fapply-public-cart-promotion","zh\u002F6.reference\u002F3.operations\u002F32.apply-public-cart-promotion",{"title":229,"path":230,"stem":231},"按实时价格与库存生成短期报价","\u002Fzh\u002Freference\u002Foperations\u002Fquote-public-cart","zh\u002F6.reference\u002F3.operations\u002F33.quote-public-cart",{"title":233,"path":234,"stem":235},"撤销公开购物车访问票据","\u002Fzh\u002Freference\u002Foperations\u002Frevoke-public-cart","zh\u002F6.reference\u002F3.operations\u002F34.revoke-public-cart",{"title":237,"path":238,"stem":239},"读取安装绑定的公开购物车","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-cart","zh\u002F6.reference\u002F3.operations\u002F35.get-public-cart",{"title":241,"path":242,"stem":243},"创建安装绑定的公开购物车","\u002Fzh\u002Freference\u002Foperations\u002Fcreate-public-cart","zh\u002F6.reference\u002F3.operations\u002F36.create-public-cart",{"title":245,"path":246,"stem":247},"读取退款退货售后资格","\u002Fzh\u002Freference\u002Foperations\u002Fget-storefront-order-after-sales-eligibility","zh\u002F6.reference\u002F3.operations\u002F37.get-storefront-order-after-sales-eligibility",{"title":249,"path":250,"stem":251},"提交退款或进入官方售后流程","\u002Fzh\u002Freference\u002Foperations\u002Frequest-storefront-order-after-sales","zh\u002F6.reference\u002F3.operations\u002F38.request-storefront-order-after-sales",{"title":253,"path":254,"stem":255},"读取订单取消资格","\u002Fzh\u002Freference\u002Foperations\u002Fget-storefront-order-cancellation-eligibility","zh\u002F6.reference\u002F3.operations\u002F39.get-storefront-order-cancellation-eligibility",{"title":257,"path":258,"stem":259},"cancelStorefrontOrder","\u002Fzh\u002Freference\u002Foperations\u002Fcancel-storefront-order","zh\u002F6.reference\u002F3.operations\u002F40.cancel-storefront-order",{"title":261,"path":262,"stem":263},"读取 receipt 绑定的最小订单状态","\u002Fzh\u002Freference\u002Foperations\u002Fget-storefront-order","zh\u002F6.reference\u002F3.operations\u002F41.get-storefront-order",{"title":265,"path":266,"stem":267},"幂等重放 dead 或 retrying 投递","\u002Fzh\u002Freference\u002Foperations\u002Freplay-installation-webhook-delivery","zh\u002F6.reference\u002F3.operations\u002F42.replay-installation-webhook-delivery",{"title":269,"path":270,"stem":271},"读取安装绑定的最小投递状态","\u002Fzh\u002Freference\u002Foperations\u002Flist-installation-webhook-deliveries","zh\u002F6.reference\u002F3.operations\u002F43.list-installation-webhook-deliveries",{"title":273,"path":274,"stem":275},"读取无 PII 的签名校验 fixture","\u002Fzh\u002Freference\u002Foperations\u002Fget-installation-webhook-signature-fixture","zh\u002F6.reference\u002F3.operations\u002F44.get-installation-webhook-signature-fixture",{"title":277,"path":278,"stem":279},"更新或停用安装绑定的 Webhook 订阅","\u002Fzh\u002Freference\u002Foperations\u002Fupdate-installation-webhook","zh\u002F6.reference\u002F3.operations\u002F45.update-installation-webhook",{"title":281,"path":282,"stem":283},"读取安装绑定的 Webhook 订阅","\u002Fzh\u002Freference\u002Foperations\u002Flist-installation-webhooks","zh\u002F6.reference\u002F3.operations\u002F46.list-installation-webhooks",{"title":285,"path":286,"stem":287},"创建安装绑定的 Webhook 订阅","\u002Fzh\u002Freference\u002Foperations\u002Fcreate-installation-webhook","zh\u002F6.reference\u002F3.operations\u002F47.create-installation-webhook",{"title":289,"path":290,"stem":291},"读取安装获准的 Webhook 事件类型","\u002Fzh\u002Freference\u002Foperations\u002Flist-installation-webhook-events","zh\u002F6.reference\u002F3.operations\u002F48.list-installation-webhook-events",{"title":293,"path":294,"stem":295},"读取公开联系渠道","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-contact","zh\u002F6.reference\u002F3.operations\u002F49.get-public-contact",{"title":297,"path":298,"stem":299},"读取店铺公开安全配置","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-store-security-config","zh\u002F6.reference\u002F3.operations\u002F50.get-public-store-security-config",{"title":301,"path":302,"stem":303},"读取公开运行配置","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-runtime-config","zh\u002F6.reference\u002F3.operations\u002F51.get-public-runtime-config",{"title":305,"path":306,"stem":307},"搜索可公开销售商品","\u002Fzh\u002Freference\u002Foperations\u002Fsearch-public-products","zh\u002F6.reference\u002F3.operations\u002F52.search-public-products",{"title":309,"path":310,"stem":311},"读取店铺已发布装修","\u002Fzh\u002Freference\u002Foperations\u002Fget-public-storefront-decoration","zh\u002F6.reference\u002F3.operations\u002F53.get-public-storefront-decoration",{"title":313,"icon":314,"path":315,"stem":316,"children":317,"page":21},"示例","i-lucide-code-xml","\u002Fzh\u002Fexamples","zh\u002F7.examples",[318,322],{"title":319,"path":320,"stem":321},"最小 Nuxt Storefront","\u002Fzh\u002Fexamples\u002Fnuxt-storefront","zh\u002F7.examples\u002F1.nuxt-storefront",{"title":323,"path":324,"stem":325},"Webhook 验签","\u002Fzh\u002Fexamples\u002Fwebhook-verification","zh\u002F7.examples\u002F2.webhook-verification",{"title":327,"icon":328,"path":329,"stem":330,"children":331,"page":21},"版本与支持","i-lucide-life-buoy","\u002Fzh\u002Foperations","zh\u002F8.operations",[332,336],{"title":333,"path":334,"stem":335},"版本、迁移与变更记录","\u002Fzh\u002Foperations\u002Fversions-and-migrations","zh\u002F8.operations\u002F1.versions-and-migrations",{"title":337,"path":338,"stem":339},"支持与安全披露","\u002Fzh\u002Foperations\u002Fsupport-and-security","zh\u002F8.operations\u002F2.support-and-security",{"id":341,"title":18,"body":342,"description":747,"extension":748,"links":749,"meta":750,"navigation":751,"path":19,"seo":752,"stem":20,"__hash__":753},"docs_zh\u002Fzh\u002F1.getting-started\u002F3.enterprise-integration.md",{"type":343,"value":344,"toc":730},"minimark",[345,366,370,373,417,421,426,449,455,459,464,467,472,476,481,492,502,508,512,517,531,534,538,543,546,559,564,568,573,590,624,628,633,636,640,645,648,661,665,670,673,678,682,687,708,712,717,720,723,727],[346,347,348,349,353,354,357,358,361,362,365],"p",{},"这是一条上线决策路径，不是 endpoint 清单。每个阶段都明确区分 ",[350,351,352],"strong",{},"已开放","、",[350,355,356],{},"需要平台开通"," 与 ",[350,359,360],{},"尚未开放","；只有 ",[363,364,83],"a",{"href":89}," 中来自 public-only artifact 的操作才视为已开放。",[367,368,369],"h2",{"id":369},"当前权威阻塞快照",[346,371,372],{},"API public-only artifact 明确给出三类阻塞。它们只解释为什么能力尚未开放，不表示 endpoint 已存在：",[374,375,376,389],"table",{},[377,378,379],"thead",{},[380,381,382,386],"tr",{},[383,384,385],"th",{},"能力",[383,387,388],{},"当前阻塞原因",[390,391,392,401,409],"tbody",{},[380,393,394,398],{},[395,396,397],"td",{},"Installation 写入 API",[395,399,400],{},"仍需 sender-constrained installation credential",[380,402,403,406],{},[395,404,405],{},"订单最终创建",[395,407,408],{},"仍需经过审核的公开订单最终创建契约",[380,410,411,414],{},[395,412,413],{},"生产启用",[395,415,416],{},"外部 readiness 尚未获得证明",[367,418,420],{"id":419},"_1-接入前检查","1. 接入前检查",[346,422,423],{},[350,424,425],{},"状态：已开放（评估指南）；需要平台开通（商业与生产资格）。",[427,428,429,433,436,439,446],"ul",{},[430,431,432],"li",{},"确认场景是匿名目录读取、API Key 服务端读取，还是尚未开放的用户授权\u002F写入能力。",[430,434,435],{},"明确数据控制者、终端用户、店铺\u002F资源边界、市场与数据保留要求。",[430,437,438],{},"指定技术负责人、安全联系人和应急联系人；建立凭据泄漏、限流和未知写入结果的响应流程。",[430,440,441,442,445],{},"只把 ",[363,443,444],{"href":89},"53 项已发布契约操作"," 纳入当前实施范围。",[430,447,448],{},"Hosted 操作、购物车\u002F报价与订单操作只按各自公开契约使用；官方托管界面、订单最终创建与支付执行未在 artifact 中声明。",[346,450,451,454],{},[350,452,453],{},"继续条件："," 所需能力均有公开 Reference，或平台书面确认开通路径。否则停止集成，不从控制台流量或混合 OpenAPI 推测接口。",[367,456,458],{"id":457},"_2-申请应用与环境","2. 申请应用与环境",[346,460,461],{},[350,462,463],{},"状态：需要平台开通。",[346,465,466],{},"应用、环境、API Key、installation、生产资格及相关能力由 Ayalink 平台配置或审批；当前没有公开的申请\u002F管理 endpoint。向平台提供应用名称、业务场景、所需市场、回调域名、技术与安全联系人，以及最小权限说明。秘密只通过平台批准的安全交付方式接收。",[346,468,469,471],{},[350,470,453],{}," 已获得目标环境的明确标识、允许能力、凭据交付与轮换说明。文档页面、client ID 或 CORS 成功都不代表生产资格。",[367,473,475],{"id":474},"_3-官方授权域与-pkce","3. 官方授权域与 PKCE",[346,477,478],{},[350,479,480],{},"状态：已开放（OAuth PKCE\u002FDPoP 契约）；需要平台开通（真实应用与官方域配置）。",[346,482,483,484,357,488,491],{},"需要用户授权时，只能把用户送往平台开通材料确认的官方 Ayalink authorization domain，并使用 Authorization Code + PKCE S256、精确 redirect URI、逐次生成并校验的 ",[485,486,487],"code",{},"state",[485,489,490],{},"nonce","。第三方不得反代或仿冒登录页，也不得收集密码\u002FMFA。",[346,493,494,495,497,498,501],{},"当前 public-only artifact 已包含 authorization 描述、token exchange 与撤销操作，并明确要求 PKCE S256 与 DPoP。只按对应 ",[363,496,83],{"href":89}," 和平台开通材料使用；本站不制造 server URL、scope、curl 或成功响应。详见 ",[363,499,500],{"href":48},"OAuth 与账号安全边界","。",[346,503,504,507],{},[350,505,506],{},"停止条件："," 未获得平台确认的官方域、client 配置或精确 redirect URI 时，不实现 OAuth 跳转或 token exchange。",[367,509,511],{"id":510},"_4-token-安全与-bff","4. Token 安全与 BFF",[346,513,514],{},[350,515,516],{},"状态：已开放（安全架构与 DPoP 契约）；需要平台开通（真实 grant）；rotation 等未声明语义不得推测。",[346,518,519,520,353,523,526,527,530],{},"浏览器不得持有 client secret，不得把 access\u002Frefresh token 放入 URL、持久化浏览器存储、日志、分析或错误报告。需要浏览器会话时使用同源 BFF：BFF 仅保存该应用自己的 grant，并向自己的前端签发 ",[485,521,522],{},"HttpOnly",[485,524,525],{},"Secure","、适当 ",[485,528,529],{},"SameSite"," 的应用会话 Cookie；绝不接收或转发 Ayalink 全局 Cookie。",[346,532,533],{},"按平台开通材料确认 token audience、资源边界、有效期、轮换和撤销语义。Artifact 已声明 DPoP；未公开的 refresh-token rotation 与 replay detection 不能当作现有能力。",[367,535,537],{"id":536},"_5-调用已开放-api","5. 调用已开放 API",[346,539,540],{},[350,541,542],{},"状态：已发布契约（53 项 public-only 操作）。",[346,544,545],{},"当前 Reference 包含目录读取、installation identity\u002Freadiness、hosted 后端基础、API Key 目录、购物车\u002F报价、订单读取\u002F取消\u002F售后、Webhook 与 OAuth PKCE\u002FDPoP。按每个 operation 页面使用真实 method、path、认证、参数与响应 schema；不要从本指南复制或猜测 Base URL，运行环境地址以平台开通材料为准。",[427,547,548,553,556],{},[430,549,550],{},[363,551,552],{"href":89},"浏览已开放 API 目录",[430,554,555],{},"API Key 只放服务端批准的 header，禁止进入浏览器 bundle 或 URL。",[430,557,558],{},"请求只发送 Reference 声明的参数；没有 schema 的示例不自行补造。",[346,560,561,563],{},[350,562,453],{}," 目标 operation 存在于当前目录，且所需认证已开通。官方 hosted UI、订单最终创建、支付执行及未进入 artifact 的 installation 写入仍不可用。",[367,565,567],{"id":566},"_6-分页错误requestid-与-429","6. 分页、错误、requestId 与 429",[346,569,570],{},[350,571,572],{},"状态：已开放（以每个 operation 的公开契约为准）。",[346,574,575,576,353,579,353,582,585,586,589],{},"分页参数、游标与响应结构只按对应 operation 页面声明实现；若 spec 未声明，则不能假设 ",[485,577,578],{},"page",[485,580,581],{},"limit",[485,583,584],{},"cursor"," 或总数。按 HTTP 状态与稳定错误码分支处理，不解析自然语言文案。保存响应中实际提供的 ",[485,587,588],{},"requestId"," 或关联编号，用于支持与对账；具体字段\u002Fheader 未声明时以平台材料为准，不自行创造。",[346,591,592,593,596,597,600,601,353,604,353,607,353,610,353,613,353,616,357,618,621,622,501],{},"收到 ",[485,594,595],{},"429"," 时，仅当响应实际提供 ",[485,598,599],{},"Retry-After"," 才按其等待；否则使用有界指数退避与抖动，并限制重试预算。",[485,602,603],{},"401",[485,605,606],{},"403",[485,608,609],{},"404",[485,611,612],{},"409\u002F412",[485,614,615],{},"422",[485,617,595],{},[485,619,620],{},"5xx"," 的恢复边界见",[363,623,92],{"href":93},[367,625,627],{"id":626},"_7-幂等与未知结果","7. 幂等与未知结果",[346,629,630],{},[350,631,632],{},"状态：已开放读取与写入操作均以各 operation 的幂等声明为准。",[346,634,635],{},"读取操作可进行有界安全重试，但仍须遵守限流。购物车、订单、Webhook、OAuth 与 hosted 变更只能遵循对应 operation 契约明确声明的幂等事实；spec 未声明时，超时或断连结果必须视为未知，不能盲目重放。",[367,637,639],{"id":638},"_8-webhook-签名重放与重试","8. Webhook 签名、重放与重试",[346,641,642],{},[350,643,644],{},"状态：已开放（订阅管理、投递查询\u002F重放契约）；需要平台开通（installation 凭据与签名材料）。",[346,646,647],{},"接收方必须基于原始请求体、平台声明的 timestamp 与签名材料完成 HMAC 校验，使用常量时间比较、时间窗校验和 event ID 原子去重；签名通过前不解析 JSON。轮换时只接受平台明确允许的当前\u002F前一 key 窗口。",[346,649,650,651,653,654,657,658,501],{},"发送方重试次数、时间窗、header 名称和 dead-letter 行为以平台开通材料为准。本地处理应有界退避、尊重实际收到的 ",[485,652,599],{},"、保留原 event ID，并让业务效果幂等。详见 ",[363,655,656],{"href":72},"Webhook 指南"," 与",[363,659,660],{"href":324},"验签示例",[367,662,664],{"id":663},"_9-测试与验收","9. 测试与验收",[346,666,667],{},[350,668,669],{},"状态：已开放（静态契约测试）；需要平台开通（真实环境联调）。",[346,671,672],{},"至少覆盖：成功读取、空结果、无效\u002F撤销凭据、权限拒绝、资源不存在、校验错误、429、5xx\u002F断连、分页边界、日志脱敏；若接入 Webhook，再覆盖错误签名、过期 timestamp、重复 event、乱序、重试和 secret 轮换。测试不得使用生产 secret 或真实个人数据。",[346,674,675,677],{},[350,676,453],{}," 合同测试使用当前 artifact，真实环境联调记录 requestId、时间、operationId 与脱敏结果；所有未知结果均能对账或安全停止。",[367,679,681],{"id":680},"_10-生产上线检查","10. 生产上线检查",[346,683,684],{},[350,685,686],{},"状态：需要平台开通；外部 readiness 尚未获得证明。",[427,688,689,692,695,698,705],{},[430,690,691],{},"平台已确认生产应用\u002F环境、允许能力、市场和凭据状态。",[430,693,694],{},"Base URL、authorization domain、redirect URI、audience、scope 与 Webhook 参数均来自平台材料，而非文档推测。",[430,696,697],{},"凭据进入 secret manager；日志、监控、告警、轮换、限流预算和应急联系人已就绪。",[430,699,700,701,704],{},"生产前重新核对当前 ",[363,702,703],{"href":89},"API Reference"," 的来源版本与变更说明。",[430,706,707],{},"灰度、回滚和停止条件有负责人；不得把测试环境成功当作生产批准。",[367,709,711],{"id":710},"_11-撤销与应急","11. 撤销与应急",[346,713,714],{},[350,715,716],{},"状态：需要平台开通（撤销入口与支持）；安全响应流程已开放。",[346,718,719],{},"发现 token\u002FAPI Key\u002FWebhook secret 泄漏、异常调用、仿冒授权页或越权迹象时：立即停止相关流量，隔离泄漏来源，通过平台批准入口撤销或轮换受影响凭据，保留 requestId、operationId、时间窗和脱敏日志，并联系官方安全渠道。不要把 token、Cookie 或完整 payload 发进工单。",[346,721,722],{},"重新上线前确认旧凭据确已失效、消费者已更新、重复事件\u002F未知写入已对账、根因已修复，并重新执行生产检查。OAuth 撤销操作已进入公开 Reference；其他凭据或 installation 的撤销入口仍只按平台开通材料使用。不得猜测 URL 或把删除本地 Cookie 当作撤销 grant。",[367,724,726],{"id":725},"reference-自动扩充原则","Reference 自动扩充原则",[346,728,729],{},"后续 API public-only artifact 到达时，importer 会校验来源 commit、hash、operationId、安全方案和内部边界，再自动生成新增双语 endpoint 页面。本指南只据真实 artifact 更新开放状态；不会等待“全量接口”，也不会手写不存在的 endpoint、scope 或响应。",{"title":731,"searchDepth":732,"depth":732,"links":733},"",2,[734,735,736,737,738,739,740,741,742,743,744,745,746],{"id":369,"depth":732,"text":369},{"id":419,"depth":732,"text":420},{"id":457,"depth":732,"text":458},{"id":474,"depth":732,"text":475},{"id":510,"depth":732,"text":511},{"id":536,"depth":732,"text":537},{"id":566,"depth":732,"text":567},{"id":626,"depth":732,"text":627},{"id":638,"depth":732,"text":639},{"id":663,"depth":732,"text":664},{"id":680,"depth":732,"text":681},{"id":710,"depth":732,"text":711},{"id":725,"depth":732,"text":726},"从接入评估、平台开通和安全授权，到 API、Webhook、测试、生产上线与应急撤销的完整路径。","md",null,{},true,{"title":18,"description":747},"fCFwCDh5NBZ_60eHMmCly5Q6dhS2w5mnH-t8qZTcBxo",[755,757],{"title":14,"path":15,"stem":16,"description":756,"children":-1},"理解公开文档、平台、店铺、安装、用户与 Provider 的信任边界。",{"title":29,"path":30,"stem":31,"description":758,"children":-1},"在保持 Ayalink 身份、页面准入、缓存和挑战边界的前提下构建独立商城。",1786201412584]