Authenticated shopper token (Digital River hosted shopper)

Use this ROPC (Resource Owner Password Credentials) Grant OAuth flow when Digital River maintains the shopper's login and password. <br> <br> Request a full access token for the authenticated shopper by providing the shopper's username and password. Use the Client Credentials Grant OAuth flow if the Digital River partner maintains the shopper login and password credentials. <br> <br> The authenticated shopper token will expire after a period (86400 seconds by default). If the shopper wants to continue the shopping flow after the token expires, use the refresh_token grant type with the refresh token from the previous create token response to get a new authenticated shopper token to continue. Or use the shopper's credentials and password grant type to create a new authenticated shopper token. <br/> <br/> Security requires HTTP basic authentication (base-64 encoded), a user API key, and a password (secret key). <br> <br> <b>Important</b>: Never expose or visibly display the Limited or Full Access Tokens requested by the APIs to the customer (such as plain text in a cookie). Suppose a customer has access to these tokens. They could bypass any restrictions built into the store frontend and place orders directly on our systems via publicly documented APIs.