What's the difference between passing 'client_credentials' and 'urn:ietf:params:oauth:grant-type:token-exchange' as the 'grant_type' parameter in the following Shopify API endpoint:
https: // {shop}.myshopify.com/ admin/oauth/ access_token
Here are the example requests:
Using 'client_credentials':
{ client_id: xxx , client_secret: xxx , grant_type: client_credentials }
Using 'urn:ietf:params:oauth:grant-type:token-exchange':
{
client_id: xxx , client_secret: xxx , grant_type: urn:ietf:params:oauth:grant-type:token-exchange , subject_token: xxx , urn:ietf:params:oauth:token-type:id_token: xxx }
In my testing store, I received the exact same result with different parameters. What's the difference between these two methods?