API Spec Index

This folder defines the contract between services for the offline NFC wallet system. It covers all HTTP endpoints exposed by the backend to terminal, gate, station, and scout clients.

API Spec is Layer 4. It depends on Tech Specs (Layer 3) for behavior rules and System Design (Layer 2) for trust model and session grant concepts.

Sections

1. Overview — auth model, base URL, versioning, common errors
2. Authentication — terminal token issuance
3. Session Grants — GET /api/session-grant
4. Policy — GET /api/policy
5. Cards — registration, read, top-up, block, reissue
6. Reconciliation — POST /api/reconcile
7. Terminal Reports — POST /api/terminal-report

Cross-references

• Terminal behavior rules: Tech Specs §8
• Session grant structure: Tech Specs §12
• Risk & financial limits: Tech Specs §9
• Status codes: Tech Specs §15