Grant Types

To request an Access Token, the Client obtains authorization from the Resource Owner. The authorization is expressed in the form of an Authorization Grant, which the Client uses to request the Access Token.

Deciding which grant to use depends on the Access Token owner and the Client type.

The same decision flow diagram applies whether it’s for requesting access to the Storefront API or Admin API. Additionally, determining the required scopes for the Access Token request also depends on the OAuth application type and the Grant Type.