Changelog
v1.0.0 — Sprint 1 (2026-05-24)
Initial release of all five RSA Platform APIs.
APIs Released
| API | Version | Operations |
|---|---|---|
| Identity API | v1 | 8 (OIDC/OAuth, MFA, invitations) |
| Platform API | v1 | 18 (tenants, retailers, webhooks, audit) |
| Admin API | v1 | 47 (offers, campaigns, stores, vendors, users, clients, features) |
| Shopper API | v1 | 25 (members, offers, loyalty, campaigns, consent, notifications) |
| POS API | v1 | 15 (members, offers, baskets, loyalty, receipts) |
Features
- Multi-tenant architecture with dedicated database per retailer
- Three authentication tracks: PKCE, Client Credentials, API Keys
- TOTP MFA for admin users
- Five offer types: Standard, MustBuy, Employee, Ecom, Recurring
- Immutable loyalty point ledger with earn/redeem
- POS basket lifecycle with idempotency on
pos_transaction_id - Two-level feature entitlement (platform + retailer)
- CCPA self-serve member deletion
- RFC 9457 ProblemDetails error responses with
traceId - Rate limiting: 200 req/min (admin/platform/shopper), 500 req/min (POS)
- POS API 200ms p95 SLA
Breaking Changes
None — initial release.
Future versions will be documented here as the platform evolves.