Issue a short-lived preview token for the builder iframe

POST

https://numueg.app/api/v1/stores/{store_id}/promotions/preview-token

Last modified:2026-09-19 16:39:33

x-numu-scope:marketing:write

Mint a 5-minute preview token scoped to this store.

No request body — the auth + path-scoping (verify_store_ownership)
already establish that the caller is the owner of store_id. Token
is signed with the same JWT key as access / refresh tokens, so it
inherits the platform's existing rotation story.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200

application/json

Successful Response

Bodyapplication/json

🟠422

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://numueg.app/api/v1/stores//promotions/preview-token' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Example 1

{
    "success": true,
    "data": {
        "token": "string",
        "expires_at": "string",
        "ttl_seconds": 0
    },
    "message": "string"
}

Modified at 2026-09-19 16:39:33

Bulk-update promotion priorities (drag-to-reorder)

List promotions for a store