Share a testimonial’s draft

use Fetchski\AttractCmsLaravel\Facades\Attract;

$testimonial = Attract::testimonials()->shareTestimonial(id: 'clx8m2k4p0000a1b2c3d4e5f6');

{
  "title": "Example title",
  "quote": "Example quote",
  "authorName": "Example author name",
  "authorTitle": "Example author title",
  "rating": 5,
  "featured": false,
  "slug": "example-slug",
  "visibility": "public",
  "scheduledPublish": "Example scheduled publish",
  "scheduledUnpublish": "Example scheduled unpublish",
  "testimonialFontOverrides": [],
  "_authorPhoto": [
    {}
  ],
  "authorPhotoUrl": "https://acme.example/example",
  "link": "https://acme.example/example",
  "source": "manual",
  "sourceId": "clx8m2k4p0000a1b2c3d4e5f6",
  "archived": false,
  "_id": "clx8m2k4p0000a1b2c3d4e5f6",
  "type": "Example type",
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

use Fetchski\AttractCmsLaravel\Facades\Attract;

$testimonial = Attract::testimonials()->shareTestimonial(id: 'clx8m2k4p0000a1b2c3d4e5f6');

{
  "title": "Example title",
  "quote": "Example quote",
  "authorName": "Example author name",
  "authorTitle": "Example author title",
  "rating": 5,
  "featured": false,
  "slug": "example-slug",
  "visibility": "public",
  "scheduledPublish": "Example scheduled publish",
  "scheduledUnpublish": "Example scheduled unpublish",
  "testimonialFontOverrides": [],
  "_authorPhoto": [
    {}
  ],
  "authorPhotoUrl": "https://acme.example/example",
  "link": "https://acme.example/example",
  "source": "manual",
  "sourceId": "clx8m2k4p0000a1b2c3d4e5f6",
  "archived": false,
  "_id": "clx8m2k4p0000a1b2c3d4e5f6",
  "type": "Example type",
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

In your app

A controller answers a route on your app: it calls shareTestimonial() and returns the answer.

Add the controller

app/Http/Controllers/ShareTestimonialController.php

<?php

declare(strict_types=1);

namespace App\Http\Controllers;

use Fetchski\AttractCmsLaravel\Data\Testimonial;
use Fetchski\AttractCmsLaravel\Facades\Attract;

final class ShareTestimonialController
{
    public function __invoke(string $id): Testimonial
    {
        return Attract::testimonials()->shareTestimonial(id: $id);
    }
}

Add the route

routes/web.php

use App\Http\Controllers\ShareTestimonialController;
use Illuminate\Support\Facades\Route;

Route::post('/testimonial/{id}/share', ShareTestimonialController::class)->middleware('auth');

It acts with your key’s access, so auth lets only your signed-in users reach it.

Call it

Your own page’s form or script sends POST /testimonial/clx8m2k4p0000a1b2c3d4e5f6/share (a form adds @csrf, as every web route checks it), and gets back its answer as JSON. Test it, below, calls it.

To keep the call in an Action instead, this writes app/Actions/Attract/ShareTestimonial.php (an invokable Action that calls shareTestimonial()) and its test under tests/Feature/Actions/Attract/ (Pest when your app has it):

Terminal

php artisan make:attract-action testimonials.shareTestimonial

Call it from the terminal

Terminal

php artisan attract:call testimonials.shareTestimonial id=clx8m2k4p0000a1b2c3d4e5f6

It calls shareTestimonial() on your default site and prints its answer as JSON. It writes, so it asks first: add --force to skip the question in a script. See Call any method from the terminal for every argument type. Takes the draft’s exact _id (…:en:draft). Answers the draft, with its aposShareKey while the link is on: the link is the draft’s _url with aposShareKey and aposShareId (the draft’s _id) in its query.

Find the id

id is the document’s _id, from a list. Ask the list for only the fields you need: each row is a document’s id and those fields.

Laravel

use Fetchski\AttractCmsLaravel\Facades\Attract;

$row = Attract::testimonials()->listTestimonialsPick(fields: ['title', 'slug'])->firstWhere('slug', 'getting-started'); // ['id' => …, 'title' => …, 'slug' => …], or null

Terminal

php artisan attract:call testimonials.listTestimonialsPick fields=title,slug

Pass $row['id'] as id. Drafts: list with aposMode: 'draft' to get the draft’s id (Find an id).

Required parameters

Named arguments, e.g. shareTestimonial(id: …); leave out the optional ones.

string

required

Required. The draft’s exact _id (…:en:draft).

Optional parameters

Optional. Leave it out (or pass null) and it isn’t sent: the site’s default applies. true adds a share key (aposShareKey) to the draft; false (the default) removes it.

Returns

A Testimonial (Fetchski\AttractCmsLaravel\Data\Testimonial). Testimonial content type. Read its properties ($testimonial->title): each says whether the site always sends it. The example answer is the site’s wire JSON: some keys differ from the property names (_id → id, _authorPhoto → authorPhoto).

string

Always sent. Its title: the name it goes by in every list, and the heading of its page where it has one.

string

Always sent. The testimonial itself, in the author’s words.

string

Always sent. The URL name: lowercase words joined by hyphens (letters outside a–z, even emoji, are kept).

string

Always sent. The document’s id. On a type with drafts it ends in its locale and mode (…:en:published, …:en:draft): the part before the first colon is its aposDocId, shared by both copies. The {_id} the type’s routes take.

string

Always sent. The document type’s name: always this type’s.

?string

Sometimes sent: null when the site leaves it out. Who said it — e.g. “Jordan Lee”.

?string

Sometimes sent: null when the site leaves it out. An optional second line under the name — e.g. “Founder, Acme Co.” or “Customer since 2021”.

?int

Sometimes sent: null when the site leaves it out. Optional. Only shown when the Testimonials section has “Show star rating” turned on. 1 to 5.

?bool

Sometimes sent: null when the site leaves it out. Hand-curation flag. The widget can be set to show only featured testimonials.

Enums\Visibility|string|null

Sometimes sent: null when the site leaves it out. Select whether this content is public or private. One of public, loginRequired; a newer site may send others, so keep a fallback.

?string

Sometimes sent: null when the site leaves it out. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.

?string

Sometimes sent: null when the site leaves it out. An ISO 8601 date and time, e.g. 2026-10-21T14:30:00.000Z.

Collection<int, TestimonialTestimonialFontOverridesItem>|null

Sometimes sent: null when the site leaves it out. A list of TestimonialTestimonialFontOverridesItem. Optional. Set part of this testimonial’s card in a different typeface. Leave empty to follow the section (and the site fonts). At most 4 items.

Show TestimonialTestimonialFontOverridesItem (Fetchski\AttractCmsLaravel\Data\TestimonialTestimonialFontOverridesItem)

?string

Sometimes sent: null when the site leaves it out. The row’s id, unique in its array.

Enums\Target|string|null

Sometimes sent: null when the site leaves it out. Which text this typeface replaces. Rows apply in order, so a broad row (Everything) followed by a narrow one (Headings) gives the section a base face plus an exception. One of all, heading, body, eyebrow, button, code; a newer site may send others, so keep a fallback.

Enums\Source|string|null

Sometimes sent: null when the site leaves it out. Where the typeface comes from. The first option costs nothing extra — those faces are already loaded. The others load an additional font on pages that use this section. One of slot, curated, cdn, upload; a newer site may send others, so keep a fallback.

Enums\Slot|string|null

Sometimes sent: null when the site leaves it out. Set in Site design → Typography. Following the site’s own faces keeps a section on-brand and adds no download. One of display, body, accent; a newer site may send others, so keep a fallback.

Enums\Curated|string|null

Sometimes sent: null when the site leaves it out. Vetted families from Bunny Fonts and Fontshare, with their available weights already verified. One of archivo, bricolage-grotesque, clash-display, courier-prime, dm-mono, dm-sans, fira-code, fraunces, general-sans, ibm-plex-mono, ibm-plex-sans, inconsolata, inter, jetbrains-mono, karla, lora, manrope, nunito-sans, outfit, playfair-display, public-sans, red-hat-mono, satoshi, sentient, sora, source-code-pro, source-sans-3, source-serif-4, space-grotesk, space-mono, spline-sans-mono, supreme, switzer, syne, ubuntu-mono, unbounded, victor-mono, work-sans, zodiak; a newer site may send others, so keep a fallback.

Enums\CdnProvider|string|null

Sometimes sent: null when the site leaves it out. Where to browse for the family. Pick one, then follow the link below to find the exact name. One of bunny, fontshare; a newer site may send others, so keep a fallback.

?string

Sometimes sent: null when the site leaves it out. Exactly as the provider’s catalog spells it, e.g. “Space Grotesk” or “Clash Display”. A name the provider doesn’t have loads nothing and this row is ignored.

?string

Sometimes sent: null when the site leaves it out. Comma-separated weights to load, e.g. 400, 700. Empty loads 400, 500, 700. Weights the family doesn’t ship are skipped by the CDN and synthesized by the browser (faux bold) — but a family that ships only ONE weight (Acme, for instance) loads nothing at all unless that weight is among these, so set it explicitly if the typeface doesn’t appear.

Collection<int, TestimonialTestimonialFontOverridesItemUploadsItem>|null

Sometimes sent: null when the site leaves it out. A list of TestimonialTestimonialFontOverridesItemUploadsItem. One file per weight/style of the SAME typeface. woff2 strongly recommended (smallest, universally supported); woff/ttf/otf also accepted. At most 4 items.

Show TestimonialTestimonialFontOverridesItemUploadsItem (Fetchski\AttractCmsLaravel\Data\TestimonialTestimonialFontOverridesItemUploadsItem)

array<string, mixed>

Always sent. File attachment reference.

?string

Sometimes sent: null when the site leaves it out. The row’s id, unique in its array.

Enums\Weight|string|null

Sometimes sent: null when the site leaves it out. Weight. One of 100, 200, 300, 400, 500, 600, 700, 800, 900; a newer site may send others, so keep a fallback.

Enums\Style|string|null

Sometimes sent: null when the site leaves it out. Style. One of normal, italic; a newer site may send others, so keep a fallback.

array<string, mixed>

Always there: [] when there are none. Any keys the site sent that aren’t listed above (such as one added after this SDK was built), by their wire names, as sent. Pass this model to a write and they are sent too. An object in it that a PHP array would read as a list ({}, {"0": …}) is a stdClass, so it is sent back as an object.

Enums\Fallback|string|null

Sometimes sent: null when the site leaves it out. Generic system font shown while this typeface loads (and if it fails). Curated picks set this automatically. One of sans, serif, mono; a newer site may send others, so keep a fallback.

array<string, mixed>

Collection<int, array<string, mixed>>|null

Sometimes sent: null when the site leaves it out. Optional. A first-party headshot from the media library. Falls back to a lettered-initial avatar when empty. The related @apostrophecms/image documents, in order (empty when none). To set it, send a list of { "_id": "…" }, one per document (one at most); a document the site can’t find is left out. At most 1 items.

?string

Sometimes sent: null when the site leaves it out. Alternative to uploading: a full https:// link to a photo hosted elsewhere. Only used when no Author photo is selected above — prefer uploading when you can (it enables focal point and responsive sizes). When set, a URL; empty or null when not.

?string

Sometimes sent: null when the site leaves it out. Optional. A link to the full story / case study / original post. When set, a URL; empty or null when not.

Enums\FaqCategorySource|string|null

Sometimes sent: null when the site leaves it out. Set automatically. Demo placeholders are removed the moment a real testimonial is published. One of manual, demo; a newer site may send others, so keep a fallback.

?string

Sometimes sent: null when the site leaves it out. Internal de-duplication key set by the demo seed.

?bool

Sometimes sent: null when the site leaves it out. In the archive: kept, but out of every list and off the site until it is restored. false (or null) for a live document.

?CarbonImmutable

Sometimes sent: null when the site leaves it out. When it was created (ISO 8601). Format: an ISO 8601 date and time.

?CarbonImmutable

Sometimes sent: null when the site leaves it out. When it last changed (ISO 8601). Format: an ISO 8601 date and time.

Sometimes sent: null when the site leaves it out. The draft’s preview share key, while its share link is on: the link is the draft’s _url with aposShareKey and aposShareId (the draft’s _id) in its query. Absent otherwise, and on published documents.

Errors

Nothing to catch: the SDK retries what is safe, and Laravel logs and renders the rest (see Errors and testing).

400

The site refused what was sent: errors() lists each field’s problem, siteMessage() the first.Retried first: No. Read: errors() (field → messages), siteMessage().

401

The API key is missing or refused (malformed, revoked, expired), or a signature its signing mode needs is missing or stale.Retried first: No. Read: siteMessage(), errorName(), data().

403

The key may not do this: a scope it lacks, or an address outside its allowlist. siteMessage() names it.Retried first: No. Read: siteMessage(), errorName(), data().

404

Nothing matches, or the caller may not see it.Retried first: No. Read: siteMessage(), errorName(), data().

500

The site failed. Its logs say why.Retried first: No: a write may have landed. Read: siteMessage(), errorName(), data().

no answer

No answer: DNS, a refused connection, TLS, or the timeout (15 s per attempt by default).Retried first: Only when nothing reached the site (neverConnected()); never after a timeout, when it may have landed. Read: reason(), neverConnected().

not sent

The client refused to send it (e.g. a path segment of ..); the site never saw it.Retried first: No. Read: reason() (what to change).

any other

Any other status, or a success whose JSON doesn’t match this SDK version’s types (update the SDK).Retried first: No. Read: reason(), status().

setup

Attract::site('acme') named a slug that isn’t under sites in config/fetchski-attract.php.Retried first: No: nothing was sent. Read: getMessage(), $e->slug.

setup

The site’s config entry is wrong: no url, a malformed api_key, a key filed under another slug, or no default site.Retried first: No: nothing was sent. Read: getMessage() (what to fix).

Behavior

Access: an API key with content:testimonials:write (or a master above it: content:testimonials:all, content:all, admin:all). A signed-in person may call it as far as their own permissions allow; anyone else gets 403.
Rate limit: the key’s own writes-per-minute limit, set when the key is created (default 120); over it, 429 with Retry-After. The client waits and retries for you; you see RateLimited only if that runs out.
Retries: a write is sent again only after a 429 (refused before it acted) or when it never reached the site. After a timeout or a 5xx it may have landed: check before you send it again.
Timeout: 15 s per attempt by default; raise timeout in config/fetchski-attract.php for longer.

Test it

It calls the route above with the SDK faked: the fake answers every call with a valid example, so nothing leaves your machine and no config or key is needed. Save it as tests/Feature/ShareTestimonialTest.php, then run your tests:

tests/Feature/ShareTestimonialTest.php

<?php

declare(strict_types=1);

namespace Tests\Feature;

use App\Models\User;
use Fetchski\AttractCmsLaravel\Facades\Attract;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;

final class ShareTestimonialTest extends TestCase
{
    use RefreshDatabase;

    public function test_share_testimonial(): void
    {
        Attract::fake();

        $this->actingAs(User::factory()->create())
            ->postJson('/testimonial/clx8m2k4p0000a1b2c3d4e5f6/share')
            ->assertOk();

        Attract::assertCalled('testimonials.shareTestimonial', fn (array $args): bool => $args['id'] === 'clx8m2k4p0000a1b2c3d4e5f6');
    }
}

Terminal

php artisan test

Answer with your own values: fake testimonials.shareTestimonial with Testimonial::factory()->make([...]), the fields you give over a valid example.

tests/Feature/ShareTestimonialAnswerTest.php

<?php

declare(strict_types=1);

namespace Tests\Feature;

use Fetchski\AttractCmsLaravel\Data\Testimonial;
use Fetchski\AttractCmsLaravel\Facades\Attract;
use Tests\TestCase;

final class ShareTestimonialAnswerTest extends TestCase
{
    public function test_share_testimonial_answers_your_values(): void
    {
        Attract::fake([
            'testimonials.shareTestimonial' => Testimonial::factory()->make(['title' => 'Your value']),
        ]);

        $testimonial = Attract::testimonials()->shareTestimonial(id: 'clx8m2k4p0000a1b2c3d4e5f6');

        $this->assertSame('Your value', $testimonial->title);
    }
}

List a testimonial’s locales

Attract::testimonials()->getTestimonialLocales()

List testimonials

Attract::testimonials()->listTestimonials()

Create a testimonial

Attract::testimonials()->createTestimonial()

Get a testimonial

Attract::testimonials()->getTestimonial()

Replace a testimonial

Attract::testimonials()->replaceTestimonial()

Delete a testimonial

Attract::testimonials()->deleteTestimonial()

POST /testimonial/{_id}/share

The endpoint this calls, in the API reference: the HTTP request and answer, and every rule the site checks.

use Fetchski\AttractCmsLaravel\Facades\Attract;

$testimonial = Attract::testimonials()->shareTestimonial(id: 'clx8m2k4p0000a1b2c3d4e5f6');

{
  "title": "Example title",
  "quote": "Example quote",
  "authorName": "Example author name",
  "authorTitle": "Example author title",
  "rating": 5,
  "featured": false,
  "slug": "example-slug",
  "visibility": "public",
  "scheduledPublish": "Example scheduled publish",
  "scheduledUnpublish": "Example scheduled unpublish",
  "testimonialFontOverrides": [],
  "_authorPhoto": [
    {}
  ],
  "authorPhotoUrl": "https://acme.example/example",
  "link": "https://acme.example/example",
  "source": "manual",
  "sourceId": "clx8m2k4p0000a1b2c3d4e5f6",
  "archived": false,
  "_id": "clx8m2k4p0000a1b2c3d4e5f6",
  "type": "Example type",
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

Get started

Using the SDK

Going further

Pages & Site

Content

Media

Forms

Ads & Conversions

Analytics

In your app

Call it from the terminal

Find the id

Behavior

Test it

List a testimonial’s locales

List testimonials

Create a testimonial

Get a testimonial

Replace a testimonial

Delete a testimonial

POST /testimonial/{_id}/share

In your app

Call it from the terminal

Find the id

Behavior

Test it

Related

List a testimonial’s locales

List testimonials

Create a testimonial

Get a testimonial

Replace a testimonial

Delete a testimonial

POST /testimonial/{_id}/share