Integration Checklist

You received sandbox credentials from Expressoft.

You generate a token and send it as Authorization: Bearer <token>.

You renew the token when a request returns 401 (or before tokenExpireOn).

You send every request as POST to the GraphQL endpoint.

You page through the lists with endCursor until hasNextPage is false.

You send order keys or a period of at most 1 year to orders.

You search for the customer before you create one.

You keep the publicKey of the customer.

You read the points balance from loyalty.points.balance and don't calculate it yourself.

You handle decimal values for points and amounts.

You handle empty lists and null values (segmentation, phone numbers, email).

You compare usedCount with maximumUsageCount for vouchers.

You create gift cards with an organization, a currency and a VAT category.

You check errorCode in the result of every mutation.

You handle the error codes of the customer and gift card mutations.

You tested the full flow in sandbox.

You asked Expressoft for the production URL and credentials.

You keep credentials and tokens private.