Access Tokens

Request OAuth 2.0 access tokens from ESW STS using client credentials. Includes required parameters, token endpoint, and code examples

Request OAuth 2.0 access tokens from the ESW Security Token Service (STS).

Most integrations use:

grant_type=client_credentials
one or more space-separated scope values

Token endpoint

Send a POST to

POST  /https://security-sts.<environment>.eshopworld.com/connect/token

Parameters

Include these fields in the request body:

grant_type: OAuth 2.0 grant type. Use client_credentials.
scope: Space-separated scopes. Example: checkout.preorder.api.all, pricing.advisor.api.all
client_id: Client identifier provided by ESW.
client_secret: Client secret provided by ESW.

Examples

curl --location --request POST "https://security-sts.<environment>.eshopworld.com/connect/token" \
  --header "Content-Type: application/x-www-form-urlencoded" \
  --data-urlencode "grant_type=client_credentials" \
  --data-urlencode "scope=<space-separated-scopes>" \
  --data-urlencode "client_id=<client_id>" \
  --data-urlencode "client_secret=<client_secret>"

var client = new RestClient("https://security-sts.<environment>.eshopworld.com/connect/token");
var request = new RestRequest("", Method.Post);

request.AddHeader("Content-Type", "application/x-www-form-urlencoded");
request.AddParameter("grant_type", "client_credentials");
request.AddParameter("scope", "<space-separated-scopes>");
request.AddParameter("client_id", "<client_id>");
request.AddParameter("client_secret", "<client_secret>");

var response = client.Execute(request);
Console.WriteLine(response.Content);

OkHttpClient client = new OkHttpClient();

RequestBody body = new FormBody.Builder()
  .add("grant_type", "client_credentials")
  .add("scope", "<space-separated-scopes>")
  .add("client_id", "<client_id>")
  .add("client_secret", "<client_secret>")
  .build();

Request request = new Request.Builder()
  .url("https://security-sts.<environment>.eshopworld.com/connect/token")
  .post(body)
  .build();

Response response = client.newCall(request).execute();
System.out.println(response.body().string());

See the Postman collection for working sandbox examples.

Access Token Response

STS returns the access token and the token type (usually Bearer).

{
    "access_token": "eyJhbGciOiJSUzI1NiIsImtpZC...I6IjQ3NkQ1QzE5QzI1Nzc0NUV",
    "expires_in": 3600,
    "token_type": "Bearer",
    "scope": "checkout.preorder.api.all"
}

Use the token

Send the token on API requests:

Authorization: Bearer <access_token>

For the full flow, see Authentication.

PreviousAuthentication NextPostman Collection

Last updated 3 days ago

Was this helpful?