OAuth 2.0
ShopperToken authentication follows the authorization code grant flow, as defined by the OAuth 2.1 standard. Depending on the type of OAuth client (public or private), this authorization flow has further requirements.
For a detailed description of the authorization flow, see the SLAS overview.
A shopper token allows you to access the Shopper API endpoints of both OCAPI and the B2C Commerce API. These endpoints can be used to build headless storefronts and other applications.
The ShopperToken
security scheme is a parent of other security schemes, such as ShopperTokenTsob
. A Shopper API endpoint can require a specific child scheme (ShopperTokenTsob
, for example) that cannot be accessed with a regular shopper token.
Settings
Client credentials
Access token URI
https://{shortCode}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/{organizationId}/oauth2/token
Authorization scopes
- sfcc.shopper-baskets-orders
- sfcc.shopper-baskets-orders.rw
Authorization code
Access token URI
https://{short-code}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/{organizationId}/oauth2/token
Authorization URI
https://{short-code}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/{organizationId}/oauth2/authorize
Authorization scopes
- sfcc.shopper-baskets-orders
- sfcc.shopper-baskets-orders.rw