Save edits to a course draft

PUT/v1/organization/{orgId}/learning/drafts/{draftId}

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

Replaces the draft's bundle with your edited copy (send the whole bundle — anything left out is dropped) and returns the draft with a fresh diff. Pass the draft's updated_at from the read you edited as baseUpdatedAt: if the draft changed since, the save answers 409 with code: COURSE_DRAFT_STALE and writes nothing. Requires write:learning. Also at PUT /v1/learning/drafts/{draftId}.

Request example

cURL

curl --request PUT \
  --url 'https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}' \
  --header 'x-access-token: <api-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "title": "<string>",
  "baseUpdatedAt": "2026-01-15T09:30:00Z",
  "bundle": {
    "lessons": [
      {}
    ],
    "courses": [
      {}
    ],
    "certifications": [
      {}
    ]
  }
}'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}', {
  method: 'PUT',
  headers: {
    "x-access-token": "<api-token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "title": "<string>",
    "baseUpdatedAt": "2026-01-15T09:30:00Z",
    "bundle": {
      "lessons": [
        {}
      ],
      "courses": [
        {}
      ],
      "certifications": [
        {}
      ]
    }
  }),
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "PUT",
    "https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}",
    headers={
        "x-access-token": "<api-token>",
        "Content-Type": "application/json"
    },
    json={
        "title": "<string>",
        "baseUpdatedAt": "2026-01-15T09:30:00Z",
        "bundle": {
            "lessons": [
                {}
            ],
            "courses": [
                {}
            ],
            "certifications": [
                {}
            ]
        }
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "PUT",
    CURLOPT_POSTFIELDS => '{
  "title": "<string>",
  "baseUpdatedAt": "2026-01-15T09:30:00Z",
  "bundle": {
    "lessons": [
      {}
    ],
    "courses": [
      {}
    ],
    "certifications": [
      {}
    ]
  }
}',
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
        "Content-Type: application/json",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
  "strings"
)

func main() {
  req, _ := http.NewRequest("PUT", "https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}", strings.NewReader(`{
  "title": "<string>",
  "baseUpdatedAt": "2026-01-15T09:30:00Z",
  "bundle": {
    "lessons": [
      {}
    ],
    "courses": [
      {}
    ],
    "certifications": [
      {}
    ]
  }
}`))
  req.Header.Add("x-access-token", "<api-token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/organization/{orgId}/learning/drafts/{draftId}"))
    .header("x-access-token", "<api-token>")
    .header("Content-Type", "application/json")
    .method("PUT", HttpRequest.BodyPublishers.ofString("{\n  \"title\": \"<string>\",\n  \"baseUpdatedAt\": \"2026-01-15T09:30:00Z\",\n  \"bundle\": {\n    \"lessons\": [\n      {}\n    ],\n    \"courses\": [\n      {}\n    ],\n    \"certifications\": [\n      {}\n    ]\n  }\n}"))
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

orgId*

draftId*

Body application/json

{ "title": "<string>", "baseUpdatedAt": "2026-01-15T09:30:00Z", "bundle": { "lessons": [ {} ], "courses": [ {} ], "certifications": [ {} ] } }

PUT

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• orgIdstringpathrequired

  Your organization ID. Any other organization returns 404.

• draftIdstring<uuid>pathrequired

Request body

application/jsonrequired

• titlestring

  Max length

  255

• baseUpdatedAtstring<date-time>
• bundleCourseBundlerequired

  Lessons, the course and the certification. A lesson's watch step plays a clip (mediaItemId) and may carry checkpoints — questions with atSeconds, seconds into the clip. A question has prompt, type, options, answer (multi-select, ordering and matching answers are JSON strings), optional config and feedback (correct, incorrect, hint). Keys are permanent: publishing upserts by key.

  Show child attributes

  • lessonsobject[]required
  • coursesobject[]
  • certificationsobject[]

Example

{
  "title": "<string>",
  "baseUpdatedAt": "2026-01-15T09:30:00Z",
  "bundle": {
    "lessons": [
      {}
    ],
    "courses": [
      {}
    ],
    "certifications": [
      {}
    ]
  }
}

Responses

200

Saved; the draft as in Get a course draft.

400

The bundle failed validation (the message names the lesson and question).

403

• SCOPE_REQUIRED — the token lacks read:learning (reads) or write:learning (writes). Legacy tokens with no scopes cannot write.
• FORBIDDEN — Learning is not on for the organization, or the token's user lacks the Lessons permission.

409

The draft changed since baseUpdatedAt (code: COURSE_DRAFT_STALE, with the current updated_at).