Skip to main content
POST
Legacy donor payment-source refresh (disabled)

Authorizations

Authorization
string
header
required

Passport bearer token authentication for legacy admin sessions.

Response

Unauthorized

Returned with HTTP 401 when the request lacks a valid Passport bearer token, a valid X-HYS-API-Key, or a valid session. The body is the simple {message, status} envelope emitted by AuthenticateApiOrKey.

message
string
required

Always the literal string Unauthorized from the auth.api_or_key middleware. Login endpoints return Invalid Credentials instead.

Example:

"Unauthorized"

status
string
required
Example:

"error"