We are creating an API in M2 enterprise edition to sell our giftcodes to a partner. The partner will have functionalities like:

  • To have Store Credit
  • Can buy giftcodes
  • View buy history

We cannot use customer token or admin token to give access as this will cause security issue (if so, any customer can access that API).

One way is by creating an endpoint which will be overriding customer endpoint as partner will be availing similar services as customer.

But here question is which authentication would be used to allow access to partner to use API as he cannot use customer token or admin token.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.