Version: 1.0.0

Swishing Tenant API

Per-tenant Swishing backend, exposed via the shared api-router Lambda.

Authentication. Authenticated endpoints require a Cognito-issued bearer token in the Authorization header. All tenant-scoped endpoints additionally require an X-Tenant-Id header (the tenant UUID).

Hosts. Customer-facing traffic enters at gateway.[dev.]swishing.cards (api-router) and is proxied to this Lambda.

Authentication

HTTP: Bearer Auth

Cognito-issued access or ID token.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT