v1

latestOpenAPI 3.0.12026-07-24204977.5 KB

Account Linking

Exchange an auth code for a payment token

Validates the one-time auth code issued after the user completes the ShopBack consent flow and returns a reusable payment token scoped to the merchant channel.

post/tokenized-payment/v1/link-sessions/token

Request body

codestring required

The short-lived auth code. Single-use, has TTL.

Example request

{
  "code": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4"
}

Response

paymentTokenstring required

Long-lived opaque token scoped to (merchant, user, country). Re-linking the same user returns the same value.

Example response

{
  "paymentToken": "aBcD1234eFgH5678iJkL9012mNoP3456"
}