Developer Documentation

REST API

OpenAPI 3.0 specification with JSON payloads. All endpoints require OAuth 2.0 authentication or API key for service accounts.

• Base URL: https://api.ibero.pro/v1
• Authentication: OAuth 2.0 + PKCE, API keys
• Content-Type: application/json
• Rate Limits: Per-tier quotas (see below)

GraphQL API

Schema stitching supports federated queries across shipments, devices, and blockchain verification endpoints.

• Endpoint: https://api.ibero.pro/graphql
• Subscriptions: WebSocket-based real-time updates
• Introspection: Enabled in sandbox environment
• Pagination: Cursor-based with Relay connections

Payload Schema

{
  "id": "evt_xxxxxxxxxxxxx",
  "type": "shipment.location_update",
  "created_at": "2024-01-15T10:30:00Z",
  "data": {
    "shipment_id": "shp_xxxxxxxxxxxxx",
    "device_id": "dev_xxxxxxxxxxxxx",
    "latitude": 39.7684,
    "longitude": -86.1581,
    "timestamp": "2024-01-15T10:29:55Z"
  },
  "signature": "sha256=xxxxx"
}

Delivery & Verification

• Retry Policy: Exponential backoff starting at 1 second, max 10 retries over 24 hours
• Timeout: 30 second response timeout. Non-2xx responses trigger retry
• Signature: HMAC-SHA256 signature in X-Ibero-Signature header
• Verification: Compute HMAC of raw body using webhook secret