Update case data

Authorization

Use Authorization: Bearer with a customer access token. Every resource must belong to the signed-in identity’s authorized set.

Request headers

AuthorizationBearer · required

A Wincora customer access token for the Traveler audience.

If-Matchrequired

Current ETag for the resource being changed. A stale version returns 412.

Content-Typeapplication/json

Encode the request body as JSON.

Path parameters

idstring · required

Opaque identifier in the authorized resource scope. Nested identifiers must belong to their parent resource.

Request body

requirementsVersionstring · required

Version from this case’s frozen requirements.

changesarray · required

The changes values for this request.

Show item fields

fieldIdstring · required

Writable public field ID from the requirements schema.

valuevalue · required

A typed value conforming to the field definition. Null clears a field only when allowed.

listChangesarray · optional

The listChanges values for this request.

Response

Returns the authorized resource or result for this operation. List results use items, nextCursor, and hasMore.

Behavior to account for

Every resource is filtered by the signed-in identity’s current relationships. Customer-account membership alone grants no access. Tokens cannot call Tenant or Visa Intelligence endpoints.

Errors

Authentication failures return 401 or 403. Inaccessible resources return 404. Business and idempotency conflicts return 409. Rate limits return 429 with retry guidance.