Update WhatsApp Pay order status of an order (Private Beta). POST /{tenantId}/api/v1/order_status_template.
Permissions
This endpoint has no endpoint-specific scope list. For OIDC tokens, the global api scope is required when the IdpScopeValidationApi feature is enabled. That OIDC fallback does not add an API-access-token scope requirement. This does not make the endpoint public or bypass role/tenant authorization. API access tokens may satisfy a listed scope through the configured scope hierarchy; OIDC tokens are checked against their scope claims. Legacy JWT authentication does not use this scope check. Authentication, role, tenant, and applicable feature or plan checks still apply. For HTTP 403, check the credential type, applicable scopes, roles, and workspace access; 403 does not always mean a missing scope. Authentication/authorization failures do not guarantee a JSON response body.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
OK
Authorization failed. Check the Permissions section for the credential-specific scope rules, and check roles and workspace access. The response may have no body; do not require a JSON error envelope.