Platform API平台接口
Overview概览
Endpoints called by the merchant. Base URL https://<API_HOST>/merchant/v1.由商户调用的接口，基础地址 https://<API_HOST>/merchant/v1。
Base URL https://<API_HOST>/merchant/v1. Every request except health is signed (Signing). We check, in this order:
地址 https://<API_HOST>/merchant/v1。除 health 外每个请求都要签名（签名）。平台按以下顺序检查：
1 maintenance on (and you are not on the maintenance whitelist) → MAINTENANCE
2 signature headers missing or malformed / X-Merchant-Code unknown → INVALID_SIGNATURE
3 source IP not in your whitelist (when configured, IP whitelist) → IP_NOT_ALLOWED
4 X-Timestamp outside ±300 s → TIMESTAMP_EXPIRED
5 signature wrong → INVALID_SIGNATURE
6 X-Request-Id repeated within 11 minutes → DUPLICATE_REQUEST
7 merchant (or parent) disabled → MERCHANT_DISABLED
8 body is not a JSON object / field validation → INVALID_PARAM