Appearance
Upload avatar
POST
/vendor/me/avatar
Загрузка аватара продавца (max 5 MB, jpeg/png/webp)
Authorizations
sessionCookie
PHP session cookie (HTTP-only, Secure, SameSite=Lax)
Type
API Key (cookie: PARTIZAP_SESSION)
csrfToken
CSRF token from CSRF_TOKEN cookie. Required on POST/PUT/PATCH/DELETE for
endpoints declaring csrfToken in their security block. Unauthenticated
session-establishment endpoints (login, register, forgot-password,
reset-password, validate-reset-token, admin login, admin TOTP verify) are
exempt — they declare security: [] and accept POST without a CSRF token.
Type
API Key (header: X-CSRF-TOKEN)
Request Body
multipart/form-data
Image file (max 5 MB, jpeg/png/webp)
Format
"binary"Responses
Avatar uploaded
application/json
JSON "data": { "avatar_url": "string" }
{
}