Authentication

The Acme Webshop API uses bearer tokens. Request a token from the partner portal, then send it on every call:

Authorization: Bearer <your-token>

Tokens expire after 24 hours. Rotate them via the /auth/refresh endpoint.