Partners - Sub-merchants | OAuth

When the sub-merchant tries to connect their Curlec account with yours:

A front-end interface for your app with a button redirects the sub-merchant to the Curlec OAuth page.
A redirect URL points to your application. Curlec redirects the sub-merchants to this URL.

Watch Out!

Only the person with

Owner

credentials of the sub-merchant account can authorise the access.

Workflow

Given below is the overall flow:

The sub-merchant logs in to the application.
The sub-merchant clicks Connect with Curlec and is shown the authorisation page. The sub-merchant clicks Authorize to proceed.
The application redirects to the Curlec authorisation URL. This URL requests the sub-merchant's approval for granting access to the requested resource on Curlec.
The user is shown the approval page where they can accept or reject the grant of this access.
After the user approves or rejects the request, Curlec redirects to the redirect_url specified.
- If approved, an authorization_code is included as a query parameter.
- If denied, the error reason is sent in the query parameter.

Handy Tips

Curlec OAuth supports the standard
authorisation code grant
.
Implement the flow described below to obtain an authorisation code and then exchange it for an access token. The
implicit grant
is currently not supported.