OAuth
Initiate a device authorization flow.
Initiates the device authorization flow by returning a device code and user code. The device displays the user code to the merchant, who visits the verification URI to approve the request. RFC 8628.
Identify the merchant account this access token belongs to.
Returns the UltraCart merchant account that authorized your application, along with the permissions that were granted. Call it immediately after exchanging your authorization code so you can display the connected account to your user and map it within your own system. Any OAuth access token may call this endpoint regardless of the permissions it holds. The granted permissions are the ones the merchant approved, which may be narrower than the permissions your application currently requests, because permissions are recorded when the merchant authorizes and do not change afterwards. If you add a permission to your application, already connected merchants keep the permissions they originally approved until they authorize again, so read this list rather than assuming your application's configured permissions.
Revoke this OAuth application.
Revokes the OAuth application associated with the specified client_id and token.
Exchange authorization code for access token.
The final leg in the OAuth process which exchanges the specified access token for the access code needed to make API calls.