Version: 1.0.0

Rabisu Reseller API

Rabisu Sanal Sunucu Bayilik (Reseller) API'si — bayilerin programatik olarak sanal sunucu siparisi vermesi, mevcut hizmetleri yonetmesi ve hesap bakiyesini sorgulamasi icin REST arayuzu.

Authentication: HTTP Basic Auth (RFC 7617). Username = API Key (rsk_live_*), Password = API Secret (rsks_live_*).

Rate Limit: Default 60 req/dk per key. mod_reseller_api_keys.rate_limit_rpm kolonu ile per-key override edilebilir. Tum response'larda X-RateLimit-* header'lari, asim durumunda Retry-After header'i doner.

Idempotency: POST/PUT/PATCH endpoint'leri Idempotency-Key header'ini destekler (RFC draft-irsdl-httpbis-idempotency-header). Ayni key + ayni body 24 saat icinde tekrar gonderilirse cached response doner. Ayni key + farkli body → 422 idempotency_key_reuse.

Authentication

HTTP: Basic Auth

HTTP Basic Authentication (RFC 7617).

• Username: API Key (rsk_live_* veya test ortaminda rsk_test_*)
• Password: API Secret (rsks_live_* / rsks_test_*)
• Bcrypt hash DB'de tutulur, plaintext secret yalnizca olusturma ANINDA gosterilir
• Yanlis credential 401 + WWW-Authenticate: Basic realm="Rabisu Reseller API" doner

Security Scheme Type:	http
HTTP Authorization Scheme:	basic

API Key: AdminToken

Server-to-server admin token (RFC yok — ozel header). Rabisu WHMCS master modulu /admin/* endpoint'lerini bu header ile cagirir. Deger .env icindeki ADMIN_API_TOKEN ile sabit-zamanli (hash_equals) karsilastirilir.

• Token yapilandirilmamis (bos) ise TUM /admin/* 403 admin_disabled doner.
• Eksik/hatali token 401 unauthorized doner.
• Bu kanal BasicAuth degildir; bayi API key'leri ile kullanilmaz.

Security Scheme Type:	apiKey
Header parameter name:	X-Admin-Token

Contact

Rabisu API Support: api@rabisu.com

License

Proprietary