I make a WordPress e-commerce plugin. I want to add a Square payments option but take an application fee for the free users as a way to monetize the plugin. As such, my code is not on my own website but on the website owner’s site. As such, I do not want to include my own access token for connecting…

For further clarity, I am not building on top of the WooCommerce Square plugin. I am making a wholly separate Square integration for a wholly separate e-commerce plugin. I am simply using their plugin as direction/inspiration for my code. My plugin: www.sunshinephotocart.com - totally separate from…

I just realized they are making the ObtainTokenRequest on their own connect.woocommerce.com site instead of within the plugin and passing those back. I bet they are using their own app ID and secret here. Starting to all click.

That’s correct they OAuth every seller to their application. It’s not possible to get any of the tokens to take additional actions on the sellers account. :slightly_smiling_face:

Just needed some sleep and it all started connecting for me, thanks for your help! I have it all working now.

Glad to hear you have it all working now. :slightly_smiling_face:

I might be confused here, but one option here might be to use the PKCE oAuth flow to avoid either (1) needing to include the app secret in your new plugin, or (2) needing to write your own proxy site eg connect.woocommerce.com . Assuming you’re starting your oAuth flow from the plugin, that is? PKC…

The PKCE flow made absolutely no sense to me so I didn’t bother with it. The “code_challenge” made no sense on what it is, how you get it or make it, or what you ultimately do with it that makes this process different. So I stuck to the Code Flow. I do start from within the user’s own WordPress web…

Wanted to provide some clarity here. Both OAuth flows won’t work in this case. The ability to gain access to take actions on behalf of a sellers account through an application that is not your own is not possible. Sellers will need to authorize your specific application through OAuth for you to take…

I mean, I have it working just fine right now? WooCommerce does it and now so will I?

Right, all API call are coming from WooCommerce application cause your OAuth’d to their application.

When taking app fees, do I connect with my own API keys?

Questions

Bryan-Square November 16, 2022, 10:06pm 26

Oh, okay. Bringing WooCommerce integration into the conversation was a bit confusing.

In that case do you have your own independent OAuth flow figured out? If not where is the confusion?

Topic		Replies	Views
Use my application of Square Developer for many main locations Questions orders-api , oauth-api	4	118	February 24, 2025
Payments on behalf of seller without them creating an "app" with Web Payments? Questions web-payments-sdk	5	1336	December 2, 2021
Payments API location id / application id structure for unique application Questions payments-api	2	1467	September 10, 2021
How to create payout Questions payments-api	6	433	January 10, 2024
Do merchants necessarily need to have square accounts? Questions payments-api	3	747	July 22, 2020

When taking app fees, do I connect with my own API keys?

Related topics