Create ticket (Bingo Tom)
Requires Idempotency-Key. Body: productCode: bingo_tom, sessionId (status sales), quantity, and exactly one of cardIds (specific unsold cards) or quickAssign: true (CSPRNG).
Cards gone / quantity too high → 422 cards-unavailable. Session not in sales → 422 sales-closed.
Authentication (AND, not OR)
Partner-Id + Bearer client_secret + Timestamp + Signature. See Authentication.
401 unauthorized · 422 hmac-invalid · 422 hmac-skew · 403 country-mismatch.
Headers
X-Lucky-Tom-Partner-Id
Public partner id. Required (AND). Not a secret.
X-Lucky-Tom-Timestamp
Unix ms. Pre-request Script overwrites on Send.
X-Lucky-Tom-Signature
HMAC-SHA256 hex. Pre-request Script overwrites on Send.
Idempotency-Key
Required on this mutation. Not in the HMAC canonical string.
Request
This endpoint expects an object.
quantity
sessionId
productCode
quickAssign
Errors
401
Unauthorized Error
422
Unprocessable Entity Error
