Punchh API and Product FAQs
What should we do if we encounter a "Captcha verification failed" error?
If you encounter a "Captcha verification failed" error message, it may be due to Cloudflare not having the base URL whitelisted or the headers and signature are not sent in our accepted format for authentication with our APIs.
How can we access the Punchh environment via the web interface and APIs?
You can access the Punchh environment via the web interface and APIs using the credentials provided. This includes URLs, keys, etc. to access your Punchh environment.
Where can we find the Punchh Postman collections?
You can peruse the Punchh Postman collections at the following link: https://www.postman.com/par-tech/workspace/par-tech-apis-official
How can we integrate Punchh Wallet?
You can find the Punchh Wallet integration blueprint at the following link: https://www.postman.com/par-tech/par-tech-apis-official/collection/qvnwc0k/par-punchh-wallet-blueprint
What should we do if we encounter technical issues with Punchh Pay and Punchh business configuration?
If you encounter technical issues, such as being unable to update your amount, it will be updated within the next 24 hours or added back to the account used to make the payment.
How long do one-time tokens stay valid?
Our current default expiry for OTP is 10 minutes.
What does "Discount qualification on receipt failed" error message mean?
This error is thrown in response to a redemption API request. Generally, the "Discount qualification on receipt failed" error is due to the values submitted in the body of the redemption request not containing matching values as configured in the Line Item Selectors and Qualification Criteria attached to the Offer in the Punchh Platform.
Does Punchh support OpenID Connect (OIDC) for SSO?
Currently, Punchh’s authentication implementation supports OAuth 2.0-based SSO but does not implement OpenID Connect (OIDC) out of the box. While our SSO flow uses the standard OAuth authorization code grant and token exchange mechanisms, it does not return an ID token (JWT) as required by OIDC-compliant identity providers. Instead, the access token returned is a Punchh-specific token used to retrieve the user object, which contains either an authentication_token or an access_token depending on how the platform is configured for your brand.