Skip to content

Commit

Permalink
DEVDOCS-4695 [new]: Store-level API accounts, add authorized users (#382
Browse files Browse the repository at this point in the history
)
  • Loading branch information
bc-andreadao authored Jul 23, 2024
1 parent 1d62564 commit 4736783
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion docs/integrations/apps/guide/auth.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ It may be more appropriate for your application to use an API client to handle t

<Callout type="info">
#### Store owner access_token constraint
Typically, only [store owners](https://support.bigcommerce.com/s/article/Store-API-Accounts#creating) and authorized users can create API accounts and `access_token`s for a store. However, when an app is approved to be publicly available for additional stores to install, it can generate `access_token`s *on behalf* of store owners.
Typically, only [store owners](https://support.bigcommerce.com/s/article/Store-API-Accounts#creating) and authorized users can create API accounts and `access_token`s for a store. However, when an app is approved to be publicly available for additional stores to install, it can generate `access_token`s *on behalf* of store owners and authorized users.
</Callout>

## Overview
Expand Down
4 changes: 2 additions & 2 deletions docs/integrations/apps/guide/types.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ keywords: app extensions

# Types of Apps

The first step when developing an app is deciding which type of app to develop. The two types of apps, single-click and connector, are defined by the method of authentication. [Single-click](#single-click) apps use an OAuth Authorization Code Grant flow. [Connector apps](#connector) require store owners to manually generate and configure store API credentials. In addition to the authentication method, apps can differ by [visibility](#visibility).
The first step when developing an app is deciding which type of app to develop. The two types of apps, single-click and connector, are defined by the method of authentication. [Single-click](#single-click) apps use an OAuth Authorization Code Grant flow. [Connector apps](#connector) require store owners or authorized users to manually generate and configure store API credentials. In addition to the authentication method, apps can differ by [visibility](#visibility).

## Single-Click

Expand All @@ -22,7 +22,7 @@ Once granted, the app can request a permanent `access_token` for making REST API
Single-click apps can use [App Extensions](/docs/integrations/apps/app-extensions).

## Connector
Connector apps use manual OAuth token creation instead of the single-click app flow. Store owners manually generate [store-level API credentials](/docs/start/authentication/api-accounts#revoking-store-level-api-credentials) and enter them into the app's configuration. While single-click apps are recommended, the following use cases might not be compatible:
Connector apps use manual OAuth token creation instead of the single-click app flow. Store owners and authorized users manually generate [store-level API credentials](/docs/start/authentication/api-accounts#revoking-store-level-api-credentials) and enter them into the app's configuration. While we recommend single-click apps, the following use cases might not be compatible:

- Customized integrations that vary per store.
- Integrations that do not provide any content for an iFrame.
Expand Down

0 comments on commit 4736783

Please sign in to comment.