Authentication

Every request carries a bearer token:

curl https://labify-staging-3hnx3fg7ca-uc.a.run.app/api/v1/catalog \
  -H "Authorization: Bearer jl_test_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"

const res = await fetch('https://labify-staging-3hnx3fg7ca-uc.a.run.app/api/v1/catalog', {
  headers: { Authorization: `Bearer ${process.env.JUSTLABS_API_KEY}` },
});

A missing/malformed/unknown/revoked key returns 401 invalid_api_key. A suspended partner account returns 403 partner_suspended on every request, even for in-flight orders that were already placed.

---