AutoSync API

curl -X GET "https://sandbox.api.autosyncshopmanager.com/v1/shops" \
  -H "Authorization: Bearer sk_sandbox_abc123..." \
  -H "Content-Type: application/json"

const res = await fetch('https://sandbox.api.autosyncshopmanager.com/v1/shops', {
  headers: { 'Authorization': 'Bearer sk_sandbox_abc123...' }
});
const data = await res.json();

$ch = curl_init('https://sandbox.api.autosyncshopmanager.com/v1/shops');
curl_setopt_array($ch, [
    CURLOPT_HTTPHEADER => ['Authorization: Bearer sk_sandbox_abc123...'],
    CURLOPT_RETURNTRANSFER => true
]);
$data = json_decode(curl_exec($ch), true);

import requests
r = requests.get('https://sandbox.api.autosyncshopmanager.com/v1/shops',
    headers={'Authorization': 'Bearer sk_sandbox_abc123...'})
data = r.json()

Authorization: Bearer sk_sandbox_a1b2c3d4e5f6...

curl -X POST "https://sandbox.api.autosyncshopmanager.com/v1/oauth/token" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -u "CLIENT_ID:CLIENT_SECRET" \
  -d "grant_type=client_credentials&scope=shops:read workorders:write"

const res = await fetch('https://sandbox.api.autosyncshopmanager.com/v1/oauth/token', {
  method: 'POST',
  headers: {
    'Authorization': 'Basic ' + btoa(CLIENT_ID + ':' + CLIENT_SECRET),
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  body: 'grant_type=client_credentials&scope=shops:read workorders:write'
});

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "shops:read workorders:write"
}

{
  "success": false,
  "error": {
    "code": "validation_error",
    "message": "The 'email' field must be a valid email address.",
    "field": "email",
    "status": 422
  },
  "request_id": "req_7f3a8b2c..."
}

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 87
X-RateLimit-Reset: 1710432060
Retry-After: 12  // only present when rate limited

{
  "success": true,
  "data": [...],
  "pagination": {
    "page": 1,
    "per_page": 25,
    "total": 142,
    "pages": 6,
    "has_more": true
  }
}

{
  "data": [{
    "id": 1, "name": "Johnson's Auto Care",
    "slug": "johnsons-auto-care", "status": "active",
    "phone": "(555) 123-4567", "email": "info@johnsonsauto.com",
    "address": { "street": "123 Main St", "city": "North Canton", "state": "OH", "zip": "44720" },
    "settings": { "tax_rate": 7.25, "labor_rate": 125.00 },
    "created_at": "2024-01-15T10:30:00Z"
  }]
}

curl -X POST "https://sandbox.api.autosyncshopmanager.com/v1/shops/1/customers" \
  -H "Authorization: Bearer sk_sandbox_..." \
  -H "Content-Type: application/json" \
  -d '{"first_name":"Mike","last_name":"Rodriguez","email":"mike@example.com","phone":"(555) 123-4567"}'

const res = await fetch('.../v1/shops/1/customers', {
  method: 'POST',
  headers: { 'Authorization': 'Bearer sk_sandbox_...', 'Content-Type': 'application/json' },
  body: JSON.stringify({ first_name: 'Mike', last_name: 'Rodriguez' })
});

{
  "vin": "1HGCM82633A123456",
  "year": 2003, "make": "Honda", "model": "Accord",
  "trim": "EX", "engine": "2.4L 4-Cyl",
  "drive_type": "FWD", "body_style": "Sedan"
}

{ "status": "completed" }

{
  "url": "https://yourapp.com/webhooks/autosync",
  "events": ["workorder.completed", "payment.received"],
  "secret": "whsec_your_secret_key"
}

const crypto = require('crypto');
const sig = req.headers['x-autosync-signature'];
const expected = crypto.createHmac('sha256', WEBHOOK_SECRET)
  .update(req.rawBody).digest('hex');
if (sig !== expected) throw new Error('Invalid signature');

$sig = $_SERVER['HTTP_X_AUTOSYNC_SIGNATURE'];
$expected = hash_hmac('sha256', file_get_contents('php://input'), WEBHOOK_SECRET);
if (!hash_equals($expected, $sig)) abort(403);

import hmac, hashlib
sig = request.headers.get('X-AutoSync-Signature')
expected = hmac.new(WEBHOOK_SECRET.encode(), request.data, hashlib.sha256).hexdigest()
assert hmac.compare_digest(sig, expected)