curl --request POST \
--url https://aropay.aro.media/api/v1/me/terms \
--header 'Content-Type: application/json' \
--cookie aropay_session= \
--data '
{
"version": "1",
"contentHash": "b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd"
}
'const options = {
method: 'POST',
headers: {cookie: 'aropay_session=', 'Content-Type': 'application/json'},
body: JSON.stringify({
version: '1',
contentHash: 'b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd'
})
};
fetch('https://aropay.aro.media/api/v1/me/terms', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aropay.aro.media/api/v1/me/terms"
payload = {
"version": "1",
"contentHash": "b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd"
}
headers = {
"cookie": "aropay_session=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"ok": true,
"data": {
"terms": {
"current": {
"version": "<string>",
"effectiveDate": "2023-12-25",
"contentHash": "<string>",
"url": "/terms",
"document": {
"version": "1",
"effectiveDate": "2023-12-25",
"title": "AroPay Sandbox Data Privacy Terms",
"keyPoints": [
"<string>"
],
"sections": [
{
"heading": "<string>",
"paragraphs": [
"<string>"
],
"bullets": [
"<string>"
]
}
]
}
},
"accepted": {
"version": "<string>",
"acceptedAt": "2023-11-07T05:31:56Z"
},
"required": true
}
}
}{
"ok": false,
"error": {
"code": "validation_error",
"message": "Request validation failed.",
"details": [
{
"path": "amount",
"message": "Required"
}
]
}
}{
"ok": false,
"error": {
"code": "invalid_api_key",
"message": "Invalid API key."
}
}{
"ok": false,
"error": {
"code": "session_required",
"message": "This action requires a browser session."
}
}{
"ok": false,
"error": {
"code": "terms_version_mismatch",
"message": "These terms have been updated. Reload them and review the current version before accepting.",
"details": {
"currentVersion": "2",
"contentHash": "eb65dc168367ab14e68105fbd9146313dc927ca99af13507fd8e1c7de6156427"
}
}
}{
"ok": false,
"error": {
"code": "rate_limited",
"message": "Too many requests. Try again shortly."
}
}{
"ok": false,
"error": {
"code": "internal_error",
"message": "An unexpected error occurred."
}
}Accept privacy terms
Session-only. Accept the current data-privacy terms. Echo the
version and contentHash from GET /me/terms, so a page still
showing an older text cannot accept it; a stale pair returns
409 terms_version_mismatch. Idempotent: accepting again keeps the
first acceptance. The platform records the version, content hash,
time, IP address and user agent as the consent record. Returns the
same shape as GET /me/terms.
Consent is given by a person, so API keys get 403 session_required;
an API-key integration needs someone to accept once in the dashboard.
curl --request POST \
--url https://aropay.aro.media/api/v1/me/terms \
--header 'Content-Type: application/json' \
--cookie aropay_session= \
--data '
{
"version": "1",
"contentHash": "b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd"
}
'const options = {
method: 'POST',
headers: {cookie: 'aropay_session=', 'Content-Type': 'application/json'},
body: JSON.stringify({
version: '1',
contentHash: 'b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd'
})
};
fetch('https://aropay.aro.media/api/v1/me/terms', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://aropay.aro.media/api/v1/me/terms"
payload = {
"version": "1",
"contentHash": "b0bbc4565026cd60a601bb366b4a2da8dfdbe96492a3b9cb3a46e3709112f3cd"
}
headers = {
"cookie": "aropay_session=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"ok": true,
"data": {
"terms": {
"current": {
"version": "<string>",
"effectiveDate": "2023-12-25",
"contentHash": "<string>",
"url": "/terms",
"document": {
"version": "1",
"effectiveDate": "2023-12-25",
"title": "AroPay Sandbox Data Privacy Terms",
"keyPoints": [
"<string>"
],
"sections": [
{
"heading": "<string>",
"paragraphs": [
"<string>"
],
"bullets": [
"<string>"
]
}
]
}
},
"accepted": {
"version": "<string>",
"acceptedAt": "2023-11-07T05:31:56Z"
},
"required": true
}
}
}{
"ok": false,
"error": {
"code": "validation_error",
"message": "Request validation failed.",
"details": [
{
"path": "amount",
"message": "Required"
}
]
}
}{
"ok": false,
"error": {
"code": "invalid_api_key",
"message": "Invalid API key."
}
}{
"ok": false,
"error": {
"code": "session_required",
"message": "This action requires a browser session."
}
}{
"ok": false,
"error": {
"code": "terms_version_mismatch",
"message": "These terms have been updated. Reload them and review the current version before accepting.",
"details": {
"currentVersion": "2",
"contentHash": "eb65dc168367ab14e68105fbd9146313dc927ca99af13507fd8e1c7de6156427"
}
}
}{
"ok": false,
"error": {
"code": "rate_limited",
"message": "Too many requests. Try again shortly."
}
}{
"ok": false,
"error": {
"code": "internal_error",
"message": "An unexpected error occurred."
}
}Authorizations
Browser session cookie minted by POST /auth/login (or passkey
login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked
Session-only accept only this credential and return
403 session_required for API keys.