Operation
Attach an order access token to the session
POST
/session/order-accessProves possession of an order by reading it upstream with the emailed order access token, then holds the token in the session so `GET /sales/orders/{orderId}` (and ticket downloads) work without the browser keeping it. Creates the session on a cold open, exactly like `POST /session`.
Body
Returns
Token attached to the existing session.
status*"success"
data*any
metadata*any
Errors
- 400
- Missing fields, or the token does not open that order (INVALID_ORDER_ACCESS).
- 404
- No session and no channel is configured for this site.
Every error names its code and links to it. All error codes
curl -X POST "https://live.ticketlayer.com/session/order-access" \ -H "Authorization: Bearer tlpk_..." \ -H "Content-Type: application/json" \ -d '{ "orderId": "ord_123", "token": "oat_…", "channelKey": "tlpk_live_abc123", "domain": "tickets.example.com" }'Response 200
{
"status": "success",
"data": {
"orderId": "ord_123",
"sessionToken": "7f0c2c1e-2d7e-4f2a-9a5e-2d2d8f7c9b1a"
},
"metadata": {
"requestId": "string"
}
}