Contents
What do you need to know about authentication in Magento?
Before web API calls can be made, you have to authenticate your identity and obtain all the necessary permissions also called authorization to access the API resource. With authentication, Magento will be able to identify the user type of caller.
What kind of API does Magento 2 support?
Magento 2 supports REST (Representational State Transfer) and SOAP (Simple Object Access Protocol), much like the old version of Magento we were used to. Official documentation is mostly based on raw curl request without examples in some specific language.
Do you need a consumer key to use Magento?
Resources with anonymous or self permission are accessible. These settings cannot be edited by Merchants. When integration is created and activated, a consumer key, consumer secret, access token, and access token secret are generated by Magento. However, the token-based authentication only requires the access token.
What do you need to know about integration in Magento?
In Magento, integration is a third-party extension which uses OAuth for authentication. The resources which the extension can access are defined by the integration. The extension can access all resources or a customized subset of resources.
Who are the guest users of Magento web API?
The Magento web API framework allows guest users to access resources that are configured with the permission level of anonymous. Guest users are users who the framework cannot authenticate through existing authentication mechanisms.
How does a token work in Magento API?
The token acts as an electronic key which allows you to access the API. The table below describes all the types of access tokens which Magento issues: The merchant will determine the Magento resources that the integration can access. Until it is manually revoked. The merchant will determine the Magento resources that an admin user can access.