Discontinued tokens passing in query params of API calls
Last updated
Was this helpful?
Last updated
Was this helpful?
The old way of passing access tokens in API calls is now completely disabled for all applications.
From now on, access tokens for API calls work only if passed as a Bearer token through the Authorization header.
where:
1003 - Ecwid store ID
secret_token - access token of the app
Making successful API calls with a token passed as a query param is now impossible. If an app still uses this approach, it can't use REST API.
Check if your app makes API calls.
If calls add an access token to the URL, remove the token from URL and add it as a Bearer token in the Authorization header instead.
Breaking changes! Сhanges listed below may break some apps' logic.