Client authentication

PAB supplies a six-character client code and client API credential. Production client endpoints require both on each request.

Required headers

X-PAB-Client: AAA111
Authorization: Bearer YOUR_PAB_API_KEY
Content-Type: application/json

The clientCode in a create request must match the authenticated X-PAB-Client. Credentials are client-specific and should be stored as secrets, never embedded in browser code or committed to source control.

Packing Station

Warehouse users sign in using the same client identity. The workstation session keeps the credential server-side and does not store it in browser local storage.

Common responses

Status	Meaning
400	Canonical request validation failed.
401	Missing or invalid client credential.
403	Client disabled or request client does not match authentication.
404	Shipment not found for the authenticated client.
409	Shipment state does not support the requested action, such as requesting a label before carrier creation.