Create Web Authorization Token

Configure token fields to generate a web authentication token in the Point of Sale (POS) app. This token is then passed as an Authorization header in a later network call.

Web Authorization Headers

Prerequisites

  • Modern POS App Build: 5.12.2 21098 or greater
  • Platform Support: iPhone & iPad
  • Offline Support: no
  • Technical Prerequisites: An endpoint that is used to generate a token using a POST call

Turn On App Settings

  1. In CMS, go to Apps and edit your app configuration.
  2. Go to Modules > Settings.
  3. Under Web Token URL, enter the token service endpoint.
  4. Under Web Token Scope, enter the scope of the token permission passed in the request as "resource".
  5. Under Web Token Grant Type, enter the token type passed in the request as "grant_type".
  6. Under Web Token Client ID, enter the client ID to call the token service passed in the request as "client_id".
  7. Under Web Token Client Secret, enter the client ID to call the token service passed in the request as "client_secret".The App Settings for Web Auth Tokens in Point of Sale CMS.

Known Issues & Restrictions

The keys for the token generation request are hard-coded in the app and can't be configured in Point of Sale CMS. These values are "resource", "grant_type", "client_id", "client_secret".

Frequently Asked Questions (FAQs)

What determines whether a new token is generated?

If the POS is about to open a web URL deeplink configured for token authentication (indicated by token=1 in the URL), the app generates a new token and includes it in the web URL request.

How long does a token last?

Tokens are for one-time use only. The app doesn't save the token and regenerates a new one each time the web URL deeplink is launched from the POS.