Hub Gateway API
List Authorizations Per-product authorization status for one distributor.
GET /api/hub/authorizations
Return the per-product authorization status for one distributor — the mirror Hub
keeps on its listings so it knows which products are applied, authorized, or
rejected. An unknown reseller returns an empty list (200, not 404).
Response sets cache-control: no-store.
Parameter Data Type Required Description x-hub-api-keystring true Shared Hub service key.
Parameter Data Type Required Description hubCustomerIdstring true The distributor's Hub customer id.
curl "https://<your-b2b-host>/api/hub/authorizations?hubCustomerId=hub_cust_1" \
-H "x-hub-api-key: $HUB_API_KEY "
Parameter Data Type Description itemsarray Authorization rows, newest first. items[].productIdstring The product id. items[].statusstring applied | authorized | rejected.items[].notestring | null Admin note (e.g. a rejection reason). items[].appliedAtstring ISO-8601 timestamp of the application. items[].decidedAtstring | null ISO-8601 timestamp of the decision, or null.
{
"items" : [
{
"productId" : "prod_123" ,
"status" : "authorized" ,
"note" : null ,
"appliedAt" : "2026-08-01T12:00:00.000Z" ,
"decidedAt" : "2026-08-02T09:30:00.000Z"
}
]
}
Status Body When 200{ "items": [] }Unknown reseller (not an error). 400{ "error": "hubCustomerId is required" }Missing query param. 401{ "error": "Unauthorized" }Bad or missing API key. 500{ "error": "Failed to load authorizations" }Unhandled server error.