Focuses on API authentication, access scopes, and permission management.
Hello All,
We are developing a Headless app with Shopify as a commerce engine. We want to use the SSO and we are using the Customer Account API. In this API, after obtaining access token we can easily query to Customer Account API.
Additionally we are trying to query and use Storefront API. We have noticed in documentation mutation: storefrontCustomerAccessTokenCreate.
We believed that this mutation is to create the Storefront Access Token (to query Storefront API) based on the customer access token. We would like to use this access token to query customer orders from Storefront API (Not customer api - we know it is possible). To get customer from storefront API we need to have customerAccessToken, which in storefront is accessible passing username and password. Is it somehow possible to get the customer information from Storefront API using access token generated from storefrontCustomerAccessTokenCreate in Customer API? What storefrontCustomerAccessTokenCreate mutation is used for?
Regards,
Kurczak