Introduction

Authorization

Most of the APIs calls has to be authorized by a Bearer token. The token is possible to obtain by doing the following request:

Headers:
Content-Type: application/x-www-form-urlencoded

Body:

client_id=YOUR_CLIENT_ID&client_secret=YOU_CLIENT_SECRET&grant_type=client_credentials

Example Response:

{
    "token_type": "Bearer",
    "expires_at": "2019-07-16T11:20:26.221Z",
    "access_token": "abcdeabcde.abcdeabcde.abcdeabcdeabcde"
}

The token has always an expiration, which is returned by expires_at field. The token has access to all merchants assigned to your app.

IMPORTANT: The authorization endpoint is rate-limited, so the tokens has to be cached on the OAuth client side.