Introduction

The Fastorama public API is served by public-api-gateway (Fastify). Integrations use Authorization: Bearer fast_… user API keys — not browser session cookies. Password login and registration routes exist for the web app; only handlers marked publicApi: true in @app/shared are callable on the gateway.

Base URLs

• Production: https://api.fastorama.se/api/v1
• Local default: http://localhost:4013/api/v1 (run backend with SERVICE_NAME=public-api-gateway)

Response shape

JSON responses use a shared envelope: success payloads include success: true and data; errors use success: false, errors (and often message / messageKey). See each operation in this reference for exact schemas.

Getting started

Create API keys under Integrations → API keys. Ping the gateway with POST /auth/session/api-key and body {}. See the Authorization guide for details.

Further reading

Signed-in documentation (e.g. Public API) covers CORS, health checks, and deployment notes.