Commerce Layer is proud to be an official sponsor the JAMstack Conf in London — 09-10 July, 2019 🎉 Don't miss out!



An OAUTH authentication method to manage all the possible interactions with a Commerce Layer organization

One of the main strengths of Commerce Layer is its API-first nature. Thanks to this, you can easily let any external entity (websites, webapps or whatever else) interact, connect and somehow communicate with your organization.

Applications are the key tool to achieve this result without too much hassle, as they help you manage your channels, integrations and webapp credentials in a very simple way.

Commerce Layer’s applications are based on OAuth (Open Authorization), an open standard for token-based authentication and authorization on the Internet. To be exact, the authorization framework used within Commerce Layer is OAuth 2: it enables applications to obtain limited access to user accounts on an HTTP service by delegating user authentication to the service that hosts the user account, and authorizing third-party app to access the user account. This can happen either on behalf of a resource owner (by orchestrating an approval interaction between the resource owner and the HTTP service), or by allowing the third-party application to obtain access on its own behalf.

In order to set up a new application within Commerce Layer you need to choose its name (the internal identifier for this resource within your Organization) and select which kind of application you want to use (it determines the authentication flow and the set of permissions for this specific application). For certain kinds of application you will also need to specify the role the callback url. Once created the new application, the system will return all the necessary OAuth information (such as client id, client secret and allowed scopes) so that you can connect to the third party app.

At the moment Commerce Layer supports four different kinds of applications: channel, integration, webapp, zapier. They should cover a large part of your demand, but anyway, this list is constantly evolving and therefore, if you have different needs in terms of integration with our platform, feel free to contact us so that we can add them as soon as possible.