Introduction

This tutorial explains how to use OAuth2 with the Bazaarvoice Privacy API using a three-legged workflow, which requires a Bazaarvoice Portal user to supply credentials during the process. If you need to automate your application without a user supplying credentials, refer to the 2-legged OAuth2 workflow.

👍

Social Commerce client's request (via Portal Privacy App or Privacy API 3-legged, Privacy API 2-legged) will also be processed by Bazaarvoice Privacy API.

Bazaarvoice has implemented 3-legged OAuth2, an open standard for access delegation. This style of OAuth is referred to as “3-legged” because it consists of three roles:

• The Client Application: This is an application that would like to access data or interact with a Bazaarvoice service on behalf of a user.
• The OAuth2 API: A Bazaarvoice service that implements the OAuth2 standard and intermediates between the User and Client Application.
• The User: This is the person who is using the Client Application. They can grant or deny the Client Application access to their data.

3-legged OAuth2 offers certain advantages including:

● The User’s credentials are never exposed to the Client Application.
● The Client Application can be used by an arbitrary number of users.
● As a well-known open standard, OAuth2 is easier to implement than a custom solution.