Authentication - Sirvo POS

All API endpoints require JWT Bearer token authentication.

POST /pos-api/v1/auth/login

Returns an access token and a refresh token.

Request

{
  "login": "user@example.com",
  "password": "secret"
}

Response

{
  "access_token": "eyJ...",
  "refresh_token": "eyJ...",
  "user": {
    "id": 1,
    "name": "John Doe",
    "role": "manager"
  }
}

Using tokens

Include the access token in all subsequent requests:

curl -X POST https://your-server/pos-api/v1/bootstrap \
  -H "Authorization: Bearer <access_token>" \
  -H "X-Device-Id: terminal-001" \
  -H "X-App-Version: 1.2.0+42" \
  -H "Content-Type: application/json"

Required headers

Header	Description
`Authorization`	`Bearer <access_token>`
`X-Device-Id`	Unique identifier for the terminal
`X-App-Version`	Client app version string

Minimum client version

The server enforces a minimum client version via the nu_pos.min_client_version system parameter. Clients below the required version receive a CLIENT_OUTDATED error response.

OrdersAPI endpoints for creating and managing orders.

​Login

​Request

​Response

​Using tokens

​Required headers

​Minimum client version

Login

Request

Response

Using tokens

Required headers

Minimum client version