fix docs

1 files changed, 9 insertions, 9 deletions

diff --git a/core/api-merchant.rst b/core/api-merchant.rst
index 3239db23..81bac40a 100644
--- a/core/api-merchant.rst
+++ b/core/api-merchant.rst
@@ -983,12 +983,12 @@ Setting up instances
 .. http:post:: /management/instances/$INSTANCE/auth
 .. http:post:: [/instances/$INSTANCE]/private/auth
 
-   Update the authentication settings for an instance.  POST operations against
-   an instance are authenticated by checking that an authorization is provided
-   that matches either the credential required by the instance being modified
-   OR the ``default`` instance, depending on the access path used.
+  Update the authentication settings for an instance.  POST operations against
+  an instance are authenticated by checking that an authorization is provided
+  that matches either the credential required by the instance being modified
+  OR the ``default`` instance, depending on the access path used.
 
-   **Request** the request must be an `InstanceAuthConfigurationMessage`.
+  **Request** the request must be an `InstanceAuthConfigurationMessage`.
 
   :http:statuscode:`204 No content`:
     The backend has successfully created the instance.
@@ -1006,7 +1006,7 @@ Setting up instances
       //   See "token" for details.
       method: "external" | "token";
 
-      // For method "external", this field is mandatory.
+      // For method "token", this field is mandatory.
       // The token MUST begin with the string "secret-token:".
       // After the auth token has been set (with method "token"),
       // the value must be provided in a "Authorization: Bearer $token"
@@ -1017,11 +1017,11 @@ Setting up instances
 
 .. http:post:: [/instances/$INSTANCE]/private/token
 
-   **Request:**
+  **Request:**
 
-   The request must be a `LoginTokenRequest`.
+  The request must be a `LoginTokenRequest`.
 
-   **Response:**
+  **Response:**
 
   :http:statuscode:`200 Ok`:
     The backend is returning the access token in a