Authorization Code Mode
Recommended for ISVs and third-party developers that serve multiple merchants. The merchant logs in, authorizes the application, and the authorization code is exchanged for a merchant token.
- Authorization code validity: 15 minutes
- Access token validity: 1 month
- Refresh before expiry