latestOpenAPI 3.0.02026-08-101013821017.9 KB

4b69392f93b9

Token

Anonymous shopper token

Request an anonymous shopper token for a public or confidential application. Use an anonymous shopper token when the shopper wants to shop anonymously. The anonymous shopper token will expire after some a certain time (86400 seconds by default). <br> <br> If the shopper wants to continue the shopping flow when the token is expired, use the refresh_token enum for the grant type with the refresh token from the previous create token response to get a new anonymous shopper token to continue. <br> <br> Security requires HTTP basic authentication (base-64 encoded), a user API key, and a password (secret key). <br> <br> <b>Important</b>: Never expose or visibly display the Limited or Full Access Tokens requested by the APIs to the customer (such as plain text in a cookie). Suppose a customer has access to these tokens. They could bypass any restrictions built into the store frontend and place orders directly on our systems via publicly documented APIs.

post/oauth20/token (Anonymous shopper token)

Response

Successful response.

access_tokenstring
token_typestring
expires_instring
refresh_tokenstring

Example response

{
  "access_token": "your_access_token",
  "token_type": "bearer",
  "expires_in": "3599",
  "refresh_token": "your_refresh_token"
}