Retrieve your API access_token (option two)

1. Fork the Authentication API on Postman.
2. Add your clientID and clientSecret as variables.
3. Set up the Authentication to use Basic Auth with your clientID and clientSecret as the Username and Password (respectively).
4. Set the POST Token API to “Inherit auth from parent”.
5. Call the Post Token API. The response will have your access_token.
6. (Optional) Under the Scripts tab, you could add the script below to the Post-response section to automatically update your access_token and add it as an Environment Variable every time you call the Post Token API. By default, the variable is named, “token”. You could change the name to something of your choice.
   
   
   Python

   tests["STATUS"] = responseCode.code === 200
   var response = JSON.parse(responseBody);
   pm.environment.set("token", response.access_token);
   

The access_token is generated by the Token API with a Base64 (utf-8, Unix newline separators) encoding of your client ID and client secret.

1. Call the Token API with a Base64 (utf-8, Unix newline separators) encoding of your client ID and client secret to generate the access_token. The encoded string is used for the Authorization header parameter.

   
   

   🚧

   Note: You can use many different online and offline tools to create the encoded key. However, we highly recommend you use an offline script. The client ID and client secrets are highly confidential information. You can use the Python script below to safely encode your key offline. Swap out the placeholders, “” and “” with your actual values.

   Python

   import base64; encoded_string= base64.b64encode("<client-ID>:<client-secret>".encode('utf-8')); print(encoded_string)
   

2. Use the Python command below to call the Token API and retrieve your access_token. Swap out <randomly-generated-GUID> with a randomly generated GUID.

   Python

   python -m pip install requests
   import requests
   url = "https://marketplace.walmartapis.com/v3/token"
   payload = { "grant_type": "client_credentials" } headers = { "accept": "application/json", "Authorization": "Basic <encoded_string>", "Content-Type": "application/x-www-form-urlencoded", "WM_QOS.CORRELATION_ID": "<randomly-generated-GUID>", "WM_SVC.NAME": "Walmart Marketplace" } access_token= requests.post(url, data=payload, headers=headers)
   print(access_token.text)