Intelligent Foods’s Partner API is secured using standard OAuth 2.0 with the Client Credentials Flow.

Partners will be provided a Client ID and a Client Secret. Before accessing any endpoint, these must be exchanged for a temporary Access Token. The Access Token must be included with every subsequent request to the API.

There are numerous online resources that document OAuth 2.0 Client Credentials Flow.

Authentication Endpoint

Environment Auth Token URL
Staging https://api.sunbasket.dev/partner/v1/token
Production https://api.sunbasket.com/partner/v1/token

Verifying the Access Token

Partners may optionally verify the signature of the Access Token to ensure server identity.