Seems a bit over-engineered to me, I would prefer a http://itch.io/purchases?name=A&user=B that returns:
{'products':[{'name':'blabla','price':1.5}]}
or something... that only lists all products B owns from A.
Right now if I want to do this without asking the users permission I have to scrape the Payments tab on my Dashboard and paginate like a mad man if I'm successful!?
Github has the same problem with their sponsorship. There I have to paginate through one big list of sponsors with their GraphQL API!
But wait seems they have exactly what I want:
https://itch.io/api/1/KEY/game/GAME_ID/purchases
that returns
{ "purchases":[ { "donation":false, "id":11561, "email":"leaf@example.com", "created_at":"2014-02-28 00:25:09", "source":"amazon", "currency":"USD", "price":"$1.00", "sale_rate":0, "game_id":3 } ] }
I just need to figure out all the authentication business...
Edit: ok, that was easy, but user_id is a integer how do I get that?
Asking for mail is worse for integrity than username...