openapi: 3.1.0
info:
  title: Adobe Commerce (Magento 2) REST Auth API
  description: Adobe Commerce (formerly Magento 2) exposes a REST API at the `/rest/{store-code}/V1/` (or simply `/rest/V1/`) base path for managing products, orders, customers, carts, categories, and other commerce resources. Authentication supports admin and customer integration tokens issued by the API, plus OAuth 1.0a for third-party integrations.
  version: 1.0.0
  contact:
    name: Adobe Commerce
    url: https://developer.adobe.com/commerce/webapi/rest/
servers:
- url: https://{host}/rest/{storeCode}
  description: Adobe Commerce instance (replace {host} with your storefront and {storeCode} with `V1` or e.g. `default`)
  variables:
    host:
      default: example.com
    storeCode:
      default: V1
security:
- BearerAuth: []
tags:
- name: Auth
paths:
  /V1/integration/admin/token:
    post:
      tags:
      - Auth
      summary: Request an admin integration token
      operationId: createAdminToken
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - username
              - password
              properties:
                username:
                  type: string
                password:
                  type: string
      responses:
        '200':
          description: Bearer token string
          content:
            application/json:
              schema:
                type: string
  /V1/integration/customer/token:
    post:
      tags:
      - Auth
      summary: Request a customer integration token
      operationId: createCustomerToken
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - username
              - password
              properties:
                username:
                  type: string
                password:
                  type: string
      responses:
        '200':
          description: Bearer token string
          content:
            application/json:
              schema:
                type: string
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: Bearer token obtained from /V1/integration/admin/token or /V1/integration/customer/token.