Review build
API Guide
Test accounts
All review accounts use the password AceLearning2026!.
| Role | Purpose | |
|---|---|---|
| Learner | learner@acelearning.test | Purchased course and progress flow |
| Learner (no access) | learner.noaccess@acelearning.test | Catalog and permission checks |
| Course Manager | manager.alpha@acelearning.test | Sequential course content |
| Course Manager | manager.beta@acelearning.test | Cross-course permission checks |
| System Administrator | admin@acelearning.test | Full platform operations |
| Backup Administrator | admin.backup@acelearning.test | Last-administrator protection |
Authentication
Send JSON to POST /api/v1/auth/login with email, password and device_name. Use the returned token as Authorization: Bearer TOKEN.
Core endpoints
| Method | Endpoint | Use |
|---|---|---|
| POST | /api/v1/auth/register | Create a Learner |
| GET | /api/v1/products | Active products |
| GET | /api/v1/my/courses | Enrolled courses |
| POST | /api/v1/orders | Create an idempotent order |
| POST | /api/v1/my/learning-sessions | Start active-time tracking |
API rules
Never submit a role during registration, a user ID for self-scoped routes, or client-calculated prices. Administrative and manager endpoints use the same role and resource policies as the Web interface.