Publishable keys and Browser API

Use publishable keys in public organizer websites.

Create a publishable key in WODira

Use publishable keys for frontend code. They can be exposed in the browser because WODira validates the Origin and limits these keys to browser endpoints.

1. In WODira, go to Organization profile → API.

2. In New key, select Publishable key (frontend).

3. Add a recognizable name, for example official website production.

4. In Allowed origins, add one domain per line:

   https://organizer.com
   https://www.organizer.com

5. For local development, you can use http://localhost:4200 or the port of your local app. Do not use http:// in production.

6. Optionally set an expiration date.

7. Click Create key and copy the wpk_live_... key immediately.

Store it in your frontend public configuration, for example build-time environment variables. It does not grant access to backend endpoints or private organization data.

Security checks

1. The key starts with wpk_live_....
2. The key is not revoked or expired.
3. The Origin header is required.
4. The origin must be in allowedOrigins.
5. successUrl and cancelUrl must belong to an allowed origin.
6. Only public, published events and categories are exposed.

Endpoints

Method	Path	SDK method
POST	/events/search	searchEvents
GET	/events/:eventId	getEvent
GET	/events/:eventId/pricing-cards	getPricingCards
POST	/checkout/registration/summary	getRegistrationSummary
POST	/checkout/registration/session	createRegistrationCheckoutSession