
Web API
Storefront and headless entry point:
text
/assets/components/minishop3/api.php?route=/api/v1/{path}The route parameter is required. The /api/v1 group always runs three middleware layers: CORS → RateLimit → ServiceCheck. TokenMiddleware is not applied to the whole group; it is attached to cart, order, and part of customer.
Manager API (connector.php) is not documented on this page.
Envelope
Success:
json
{
"success": true,
"message": "",
"data": {}
}Error:
json
{
"success": false,
"message": "…",
"code": 400,
"errors": null,
"error_code": "bad_request"
}The errors key is always present in error bodies (often null). error_code is resolved on the server. Details: Errors.
Middleware
| Order | Middleware | Purpose |
|---|---|---|
| 1 | CorsMiddleware | Origins from ms3_cors_allowed_origins |
| 2 | RateLimitMiddleware | ms3_rate_limit_* |
| 3 | ServiceCheckMiddleware | MS3 services available |
| (per route) | TokenMiddleware | Resolve / auto-mint token |
CORS and rate limit settings: CORS, System settings.
Sections
Custom routes and FastRoute details: API Router.
