Auth options accepted by the mutating donation-train fetchers +
the campaign-scoped fetchCampaignRulesets GET.
Mirrors
import("../playlive").LeaderboardAuthOptions — pass whichever
credential the caller has:
adminApiKey — shared server-to-server key, sent as x-api-key.
tiltifyOAuthToken — campaign-owner OAuth token, sent as
Authorization: OAuth <token>. Restricted to campaigns the token's
Tiltify user owns; team campaigns aren't verifiable via OAuth and
require the admin key.
Both fields are optional so admin-only server jobs can omit them and
the historical
(no-auth) call shape still type-checks. Server-side auth is enforced
by
packages/overlays/donation-trains/api/src/routes/* in the pipeline
repo.
Auth options accepted by the mutating donation-train fetchers + the campaign-scoped
fetchCampaignRulesetsGET.Mirrors import("../playlive").LeaderboardAuthOptions — pass whichever credential the caller has:
adminApiKey— shared server-to-server key, sent asx-api-key.tiltifyOAuthToken— campaign-owner OAuth token, sent asAuthorization: OAuth <token>. Restricted to campaigns the token's Tiltify user owns; team campaigns aren't verifiable via OAuth and require the admin key.Both fields are optional so admin-only server jobs can omit them and the historical (no-auth) call shape still type-checks. Server-side auth is enforced by
packages/overlays/donation-trains/api/src/routes/*in the pipeline repo.