---
title: "Anonymous shopper token"
method: POST
path: "/oauth20/token (Anonymous shopper token)"
tags: ["Token"]
---

# Anonymous shopper token

`POST /oauth20/token (Anonymous shopper token)`

Request an anonymous shopper token for a public or confidential application. Use an anonymous shopper token when the shopper wants to shop anonymously. The anonymous shopper token will expire after some a certain time (86400 seconds by default). <br> <br> If the shopper wants to continue the shopping flow when the token is expired, use the refresh_token enum for the grant type with the refresh token from the previous create token response to get a new anonymous shopper token to continue. <br> <br> Security requires HTTP basic authentication (base-64 encoded), a user API key, and a password (secret key). <br> <br> <b>Important</b>&colon; Never expose or visibly display the Limited or Full Access Tokens requested by the APIs to the customer (such as plain text in a cookie). Suppose a customer has access to these tokens. They could bypass any restrictions built into the store frontend and place orders directly on our systems via publicly documented APIs.

## Response `200`

Successful response.

- OauthToken
  - `access_token` string
  - `token_type` string
  - `expires_in` string
  - `refresh_token` string

## Other responses

- `401` — * invalid_client * invalid_request

---

[API](https://skmtc.net/digitalriver/apis/commerce-api-suite-shopper-apis.md) · [All operations](https://skmtc.net/digitalriver/apis/commerce-api-suite-shopper-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/digitalriver/commerce-api-suite-shopper-apis/revisions/4b69392f93b9/schema)