OAuth 2.0
ShopperTokenTsob
(Tsob = trusted system on behalf) is a child of the ShopperToken
security scheme and extends the functionality of ShopperToken
for specific use cases.
A token of type ShopperTokenTsob
allows you to access Shopper API endpoints, including OCAPI and Salesforce Commerce API for headless applications. Besides endpoints that require this specific subtype, all other endpoints secured by the ShopperToken
parent scheme can be accessed with a ShopperTokenTsob
.
To learn how to get a ShopperTokenTsob
token, see getTrustedSystemAccessToken.
Settings
Authorization grants
- client_credentials
Access token URI
https://{short-code}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/{organizationId}/oauth2/trusted-system/token
OAuth 2.0 access token in Bearer scheme
Bearer b325e95c-2cd7-11e5-b345-feff819cdc9f
Responses
Unauthorized. Your access token is invalid or expired and can’t be used to identify an API client or user.
{
"type": "https://api.commercecloud.salesforce.com/documentation/error/v1/errors/unauthorized",
"title": "Unauthorized",
"detail": "Your access token is invalid and can’t be used to identify an API client or user."
}
WWW-Authenticate: Bearer realm="servers",
error="invalid_token",
error_description="The access token expired"
A URI reference [RFC3986] that identifies the problem type. This specification encourages that, when dereferenced, it provide human-readable documentation for the problem type (e.g., using HTML [W3C.REC-html5-20141028]). When this member is not present, its value is assumed to be "about:blank". It accepts relative URIs; this means that they must be resolved relative to the document's base URI, as per [RFC3986], Section 5.
https://example.com/probs/out-of-credit
A short, human-readable summary of the problem type. It will not change from occurrence to occurrence of the problem, except for purposes of localization.
You do not have enough credit.
A human-readable explanation specific to this occurrence of the problem.
Your current balance is 30, but that costs 50.
A URI reference that identifies the specific occurrence of the problem. It may or may not yield further information if dereferenced. It accepts relative URIs; this means that they must be resolved relative to the document's base URI, as per [RFC3986], Section 5.
/account/12345/msgs/abc