We use the e-commerce iframe/api integration to accept Clover payments for our merchants on the web. Since yesterday, we have started to see an increase in 401 Unauthorized responses to the PAKMS endpoint (https://api.clover.com/pakms/apikey). This is happening for a number of merchants.
Retrieving the permissions for the access token (https://api.clover.com/v3/access_tokens/[token] shows that the token is valid and the merchant has the appropriate permissions, but the PAKMS endpoint returns Unauthorized.
Token response:
{ "id": [redacted], "permissions": { "elements": [ { "name": "INVENTORY_W" }, { "name": "PROCESS_CARDS" }, { "name": "INVENTORY_R" }, { "name": "ORDERS_W" }, { "name": "MERCHANT_R" }, { "name": "PAYMENTS_W" }, { "name": "PAYMENTS_R" }, { "name": "MERCHANT_W" }, { "name": "ORDERS_R" } ] } }
