Understand authentication failures, permission denials, and validation responses.
Authenticated partner methods are typically
POST /admin/api/… with a staff token.
See Authentication and API Reference.
HTTP status usage
Many partner methods return HTTP 200 with an application payload describing success or failure. Treat session_expired as an auth error and re-authenticate.
Session expired
Invalid tokens produce a JSON object containing session_expired.
Permission denied
Protected methods may deny access when the staff role lacks module permission.
Validation errors
Form validation failures return validation messages for the posted fields.
Was this page helpful?