Version: 1.0.0

Rabisu Reseller API

Rabisu Sanal Sunucu Bayilik (Reseller) API'si — bayilerin programatik olarak sanal sunucu siparisi vermesi, mevcut hizmetleri yonetmesi ve hesap bakiyesini sorgulamasi icin REST arayuzu.

Authentication: HTTP Basic Auth (RFC 7617). Username = API Key (rsk_live_*), Password = API Secret (rsks_live_*).

Rate Limit: Her API anahtarinin limiti AYRIDIR (ortak/global limit yok). Limit uc grubuna (kova) gore dakika basinadir: default 60 (siparis, urun, bakiye, webhook, vnc, kimlik bilgisi, lifecycle), services_read 150 (GET /services, GET /services/{id}), services_status 300 (GET /services/{id}/status), services_changes 120 (power, rebuild, parola, upgrade). Buyuk bayiye kova bazli artis Rabisu tarafindan tanimlanir; etkin degerler GET /auth/me → rate_limits. Tum yanitlarda X-RateLimit-* header'lari, asimda 429 + Retry-After (saniye) doner — istemci o kadar bekleyip tekrar denemelidir.

Idempotency: POST/PUT/PATCH endpoint'leri Idempotency-Key header'ini destekler (RFC draft-irsdl-httpbis-idempotency-header). Ayni key + ayni body 24 saat icinde tekrar gonderilirse cached response doner. Ayni key + farkli body → 422 idempotency_key_reuse.

Authentication

HTTP: Basic Auth

HTTP Basic Authentication (RFC 7617).

• Username: API Key (rsk_live_* veya test ortaminda rsk_test_*)
• Password: API Secret (rsks_live_* / rsks_test_*)
• Bcrypt hash DB'de tutulur, plaintext secret yalnizca olusturma ANINDA gosterilir
• Yanlis credential 401 + WWW-Authenticate: Basic realm="Rabisu Reseller API" doner

Security Scheme Type:	http
HTTP Authorization Scheme:	basic

API Key: AdminToken

Server-to-server admin token (RFC yok — ozel header). Rabisu WHMCS master modulu /admin/* endpoint'lerini bu header ile cagirir. Deger .env icindeki ADMIN_API_TOKEN ile sabit-zamanli (hash_equals) karsilastirilir.

• Token yapilandirilmamis (bos) ise TUM /admin/* 403 admin_disabled doner.
• Eksik/hatali token 401 unauthorized doner.
• Bu kanal BasicAuth degildir; bayi API key'leri ile kullanilmaz.

Security Scheme Type:	apiKey
Header parameter name:	X-Admin-Token

Contact

Rabisu API Support: api@rabisu.com

License

Proprietary