Environments
Staging
Section titled “Staging”| Base URL | https://tfs-api.karyabilisim.com |
| Authentication | OIDC Bearer token (Keycloak); developer headers as fallback only — see Authentication |
| Data | Synthetic test data only |
| Resets | Staging data may be reset periodically with notice |
Staging is deployed from the same codebase as production; business rules and the error contract are identical.
Production
Section titled “Production”The production base URL is tenant-specific and agreed during onboarding
(e.g. https://api.<your-company>.karyabilisim.com or your own domain).
Production authentication is OIDC; developer headers are disabled.
Request conventions
Section titled “Request conventions”Content-Type: application/json; charset=utf-8- Business endpoints are prefixed
/api/v1/...; unauthenticated endpoints live under/api/public/.... - Write endpoints that require idempotency accept an
Idempotency-Keyheader; repeating a key returns the original result. - Paged lists use
page(0-based) andsize(default 20, max 100). - Every response carries a
traceId; include it when reporting issues.