Testing

Smoke test authentication

Without an API key, protected endpoints should return 403:

curl -i https://api-dev.archiveorder.com/orders

Expected body:

{
  "error": "Authorization bearer token is required"
}

Test idempotency

Send the same create-order request twice with the same Idempotency-Key. The API should not create a duplicate order.

export IDEMPOTENCY_KEY="$(uuidgen)"

curl -X POST "$ARCHIVE_ORDER_BASE_URL/orders" \
  -H "Authorization: Bearer $ARCHIVE_ORDER_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $IDEMPOTENCY_KEY" \
  -d '{
    "repositoryName": "Archives de Paris",
    "documentType": "Birth record",
    "location": "Paris, France"
  }'

Repeat the same command with the same key.

Test webhooks

Use a development HTTPS endpoint that preserves request headers and raw body. Verify:

The endpoint receives X-ArchiveOrder-Signature.
Your handler rejects requests with a missing or invalid signature.
Your handler returns a 2xx response after successful processing.
Replayed payloads do not create duplicate downstream side effects.

Getting Started

Guides

API Reference

Resources

Smoke test authentication

Test idempotency

Test webhooks

​Smoke test authentication

​Test idempotency

​Test webhooks

Smoke test authentication

Test idempotency

Test webhooks