client_idstringrequired
The SLAS public client ID or SLAS private client ID for use with trusted-agent requests. When using a private client ID a PKCE code challenge is not required.
channel_idstringrequired
The channel (B2C Commerce site) that the user is associated with.
code_challengestring
PKCE code challenge. Created by the caller.
The `code_challenge` is created by SHA256 hashing the `code_verifier` and Base64 encoding the resulting hash.
The `code_verifier` should be a high entropy cryptographically random string with a minimum of 43 characters and a maximum of 128 characters.
The *`code_challenge` and 'code_verifier'* are required if a using SLAS public `client_id`.
login_idstringrequired
The ID of the shopper for trusted agent access.
For TAOB Guest the `login_id` must be set to `Guest`.
idp_originstringrequired
The IDP that the shopper is associated with.
For TAOB Guest the `idp_origin` must be set to `slas`. This is standard for SLAS Guest requests. If any other `idp_origin` value is used, SLAS returns a bad request.
redirect_uristringrequired
The redirect for Account Manager to redirect to. A variety of URI formats and wildcard for host are supported, but app links like `airbnb://` or `fb://` are not. Examples of supported URIs:
- `http://localhost:3000/callback`
- `https://example.com/callback`
- `com.example.app:redirect_uri_path`
- ` *.subdomain.topleveldomain.com`
response_typestringrequired
Must be `code`. Indicates that the caller wants an authorization code.
One ofcode