tray-autorizacao

What problem does it solve?

Implements the complete OAuth 2.0 authorization flow and token lifecycle for Tray API integrations, removing guesswork about token exchange, renewal, error handling, and per-store API addresses so developers can authenticate stores reliably.

Core Features & Use Cases

• Three-step OAuth flow: guidance for redirecting merchants, handling callbacks, and exchanging authorization codes for access and refresh tokens.
• Token lifecycle management: renewal guidance for access_token (3 hours) and refresh_token (30 days), plus recommended scheduling and storage practices.
• Error handling & limits: mappings for authentication error codes (1000–1003, 1099), HTTP responses (401, 429), and advice for exponential backoff and rate-limit strategies.
• Use case: first-time store onboarding where the app obtains consumer credentials, completes the redirect/callback flow, stores api_address per store, and schedules automatic token refresh before expiry.

Quick Start

Redirect the merchant to Tray authorization, capture the callback code, and exchange it for access and refresh tokens using your consumer_key and consumer_secret.