OpenAPI 3.1
Reference contract and sample endpoints.
KIOWARE DEVELOPER CENTER
API Authentication and Application Identity
Guide to mTLS, OAuth 2.0/OIDC, client identity, token handling and authorization.
DEVELOPER ASSETS
Technical assets
Postman
Environment variables, auth and sample requests.
Events
Schemas, retry, deduplication and correlation.
Acceptance
UAT checklist and acceptance evidence.
SECURITY BASELINE
Production rules
- Do not embed secrets in Kiosk applications
- Every state-changing command uses an idempotency key
- Every transaction has a trace or correlation ID
- Event consumers handle duplicates and out-of-order delivery
- Production credentials follow a security review