Get your brand
Partner key only. The logo and light logo, the colours and font of your restaurant owners’ dashboard, the support email and phone, the website, showPoweredBy (“Drevet av LettBestilt”), whiteLabelEnabled (set by LettBestilt, read only) and updatedAt. Colours and font are shown as stored, but only apply with white label. No role needed.
Authentication
The partner key (lbp_test_… or lbp_live_…), sent as Authorization: Bearer lbp_… and created in LettBestilt Partner under Partner key. It belongs to the whole partner, not to a restaurant, and only works against /api/v1/partner. Server to server only: a request with an Origin header is rejected with 403 FORBIDDEN, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (lbs_…) here give 401 UNAUTHORIZED; an expired key gives 401 KEY_EXPIRED.