DIdigitalriver
Token

Authenticated shopper token (Client Hosted Shopper)

Use this Client Credentials Grant OAuth flow when the Digital River partner maintains the shopper login and password credentials. <br> <br> Request a full access token for the authenticated shopper by providing the shopper's external reference identifier and the client_credentials enum as the grant type. <br> <br> Security requires HTTP basic authentication (base-64 encoded), a user API key, and a password (secret key). <br> <br> <b>Important</b>: Never expose or visibly display the Limited or Full Access Tokens requested by the APIs to the customer (such as plain text in a cookie). Suppose a customer has access to these tokens. They could bypass any restrictions built into the store frontend and place orders directly on our systems via publicly documented APIs.

post/oauth20/token (Client Hosted Shopper)

Request

  • Base URL
    https://api.digitalriver.com
  • URL
    https://api.digitalriver.com/oauth20/token (Client Hosted Shopper)
  • Auth
    none declared

Request body application/x-www-form-urlencoded

dr_external_reference_idstring required

Provide the external reference ID when requesting an authenticated shopper token for a shopper maintained by a Digital River partner.

dr_limited_tokenstring

Provide the limited access token used to identify the anonymous shopper session when transferring the anonymous shopper session and shopping cart to a specific authenticated shopper.

dr_session_tokenstring

Provide the shopper's session-aware token for a Digital River-hosted solution when transferring the shopper session and shopping cart to a specific authenticated shopper.

grant_type'client_credentials' | 'password' | 'refresh_token' required

Use "client_credentials" as the grant type when the Digital River partner maintains the shopper login and password credentials. Use "refresh_token" as the grant type to continue the shopping flow for an authenticated shopper.

Response

Successful response.

access_tokenstring
token_typestring
expires_instring

Example response

{
  "access_token": "your_access_token",
  "token_type": "bearer",
  "expires_in": "3599"
}

Changes

No recorded changes to this operation across all 1 revision of this API.