http://<host>:<port>/<company_path>/erp/api/v0/

curl -s -c jar.txt -D - http://localhost:8130/login.pl

HTTP/1.1 200 OK
Set-Cookie: LedgerSMB=01nzLPYaSo5CSZ3UfZpy_PRSIEvMj6A0EE-_wErDS2w~1800590805~WymMuFl7NFz9Ug5oG476a05AeWBiYhKZJQMiWBuZUkgsJq-EFUebz98SkfyH4b-i~aAJRGMBOfoRMGcD8ODaeIX7Qx1NUC_0xJ9HGW3GU6rE~2; path=/; expires=Thu, 01-Jan-1970 00:00:01 GMT; SameSite=Strict; HttpOnly

curl -s -b jar.txt -c jar.txt -D - -H 'Content-Type: application/json' \
  -X POST 'http://localhost:8130/login.pl?action=authenticate' \
  -d '{"login":"admin","password":"q1w2e3r4","company":"demo1"}'

HTTP/1.1 200 OK
Content-Type: application/json
Set-Cookie: LedgerSMB=nZecFe-8Fh5UUqr6KAF96KHYa6uyPVZtXXEp2aGb0_0~1800590806~hDL0CUao6fSYmLZDuDdr4Y4ENwSeokvwR-oQUgia8puBxyOBr4JbI9bGTmHqUODLUi9ar9RHiM2Rnz8Wi7rkmNNIBL-Wgws4yamOucnU9IRWBpAcc8qt0gNCWGL6tvggKN7cDtPzjaRCPzqUvhOiPX_Zk1IoitHJzyibAlH9ZTKirzeU1J0yo0d3u7yW7F7qU1EWkwWFu3hSv5dEVgYJA8SZSLYoOjoqEGcuqt9anyOs01fqGKlpXKfky4ZnUL0PSv1_GYickUsgG-BYCQZCZJ4KrUj4VW8fOS2h1qm_jB9i91AfLpKghJLp6QC2KViy-7-eeDGpwITGwb41zzZHHhExeJJzrm2VOs26RqYaDvFvuXdLf0bwdZ8Howb2FiAo~B_qUJ-xZ-c-x5IYeySaua_WHVhUP4QjBUixh6QiV2TY~2; path=/e368b9938746fa090d6afd3628355133/; SameSite=Strict; HttpOnly

{ "target":  "e368b9938746fa090d6afd3628355133/erp.pl?user=admin" }

curl -s -b jar.txt \
  http://localhost:8130/e368b9938746fa090d6afd3628355133/erp/api/v0/session

{
   "preferences" : {
      "dateformat" : "yyyy-mm-dd",
      "numberformat" : "1000.00",
      "printer" : null,
      "language" : null,
      "stylesheet" : null
   },
   "roles" : [
      "account_all",
      "account_create",
      "account_delete",
      "account_edit",
      "account_link_description_create",
      "ap_all",
      ...（中间省略 120 余项）...
      "users_manage",
      "voucher_delete",
      "warehouse_create",
      "warehouse_edit",
      "yearend_reopen",
      "yearend_run"
   ],
   "password_expiration" : "PT15H32M17.370174S"
}

curl -s -b jar.txt \
  http://localhost:8130/e368b9938746fa090d6afd3628355133/erp/api/v0/products/partsgroups

{
   "_links" : [
      {
         "rel" : "download",
         "title" : "PDF",
         "href" : "?format=PDF"
      },
      {
         "rel" : "download",
         "title" : "PS",
         "href" : "?format=PS"
      },
      {
         "href" : "?format=XLS",
         "title" : "XLS",
         "rel" : "download"
      },
      ...（XLSX、ODS、CSV、TXT、HTML 同构）...
   ],
   "items" : [
      {
         "id": 1,
         "_meta": { "ETag": "e0721b361b77f26fa04937b033bd3d96" },
         "parent": null,
         "description": "API 实测商品组-已更新"
      },
      ...
   ]
}

curl -s -b jar.txt -D - -H 'Content-Type: application/json' \
  -X POST .../erp/api/v0/products/partsgroups \
  -d '{"description":"D5-API-evidence-group"}'

HTTP/1.1 201 Created
ETag: "f617be7f04c8aef0b5ea484b6754b9c4"

{
   "id" : 4,
   "description" : "D5-API-evidence-group",
   "parent" : null
}

curl -s -b jar.txt -D - -H 'Content-Type: application/json' \
  -H 'If-Match: "f617be7f04c8aef0b5ea484b6754b9c4"' \
  -X PUT .../erp/api/v0/products/partsgroups/4 \
  -d '{"id":4,"description":"put-with-current-etag-ok"}'

HTTP/1.1 200 OK
ETag: "6a13e70925744985f7451f46c3a97eb5"

{
   "parent" : null,
   "description" : "put-with-current-etag-ok",
   "id" : 4
}

{
   "error" : 1,
   "errors" : [
      {
         "context" : [
            {
               "instance_path" : "/",
               "schema_path" : "/allOf/1/required/0",
               "message" : "instance does not have required property \"id\""
            }
         ],
         "message" : "request body error"
      }
   ],
   "msg" : "LedgerSMB API errors"
}

PATCH .../products/partsgroups/4  (If-Match + {"description":"patch-json-body"})
→ HTTP/1.1 500 Internal Server Error / Internal Server Error

PATCH .../products/partsgroups/4?description=patch-query-param  (无请求体)
→ HTTP/1.1 500 Internal Server Error / Internal Server Error

Can't call method "message" on an undefined value at /srv/ledgersmb/lib/LedgerSMB/Router.pm line 501, <$io> line 1.
2026/10/24 04:08:48 Unexpected exit; rolling back current db transaction

GET .../erp/api/v0/invoices  → HTTP/1.1 501 Not Implemented（空响应体）
GET .../erp/api/v0/orders    → HTTP/1.1 501 Not Implemented（空响应体）

#!/bin/bash
# LedgerSMB 1.13.8 API 集成最小流程（2026-10-24 实测通过）
BASE=http://localhost:8130
COMPANY=demo1
CP=e368b9938746fa090d6afd3628355133          # md5(公司名)；也可从认证响应 target 字段解析
API=$BASE/$CP/erp/api/v0
JAR=$(mktemp)

# 1) 种匿名会话 Cookie
curl -s -c $JAR $BASE/login.pl > /dev/null

# 2) 认证（响应体 target 字段即含 company_path）
curl -s -b $JAR -c $JAR -H 'Content-Type: application/json' \
  -X POST "$BASE/login.pl?action=authenticate" \
  -d '{"login":"admin","password":"q1w2e3r4","company":"demo1"}'

# 3) 确认会话与权限
curl -s -b $JAR $API/session | python3 -m json.tool

# 4) 读列表（每条内嵌 _meta.ETag，可直接用于 If-Match）
curl -s -b $JAR $API/products/partsgroups/

# 5) 创建
ETAG=$(curl -s -b $JAR -D - -o /dev/null -H 'Content-Type: application/json' \
  -X POST $API/products/partsgroups \
  -d '{"description":"集成新建组"}' | grep -i '^etag' | tr -d '\r' | sed 's/^[Ee]tag: *//')

# 6) 乐观锁更新（必须带 If-Match；失败得到 409 则回到第 4 步重取）
curl -s -b $JAR -D - -H 'Content-Type: application/json' \
  -H "If-Match: $ETAG" -X PUT $API/products/partsgroups/4 \
  -d '{"id":4,"description":"集成更新后的组"}'