Validate an Apple Pay merchant session
Requests a merchant session from Apple’s startSession endpoint on behalf
of the storefront domain. Requires a Referer header naming the
storefront: the referer host must match a verified Apple Pay domain or a
shared checkout domain, otherwise the request is rejected with 422
before Apple is contacted. The payment account used for the Apple session
may differ from the account pinned for routing.
Headers
Storefront page URL initiating the Apple Pay session. The host must
match a verified Apple Pay domain or a shared checkout domain; requests
without a referer, or with an unrecognized host, are rejected with
422.
Path Parameters
Opaque cart token returned by the create-cart response. It scopes the request to a single cart and is the credential for these endpoints — cart-token authentication carried in the path, with no bearer token or API key.
Body
Response
Merchant session
Success body for Apple Pay merchant validation. apple_pay is Apple's raw startSession response body as a JSON-encoded string.