BigCommerce
Commerce User OAuth + API Key

BigCommerce

Access BigCommerce store data including products, orders, and customers via OAuth or API token authentication.

Auth Model

User OAuth + API Key

API key-based authentication. Users provide their API key, which Authpipe stores encrypted and monitors for rotation and validity. No OAuth flow required.

Connection Flow

1
User provides API key
2
Key encrypted and stored
3
Health checks begin
@authpipe/node
// Get a valid credential — always fresh, zero latency
const { credential } = await authpipe.getCredential({
  provider: 'bigcommerce',
  tenantId: 'org_acme',
  userId: 'user_123',
});
// Use the credential with the provider API
const response = await fetch('https://api.example.com/data', {
  headers: { Authorization: `Bearer ${credential}` },
});
@authpipe/react
// Drop-in React component
<ConnectButton
  provider="bigcommerce"
  onSuccess={(conn) => console.log('Connected!', conn)}
/>

Available Scopes

Permissions you can request when connecting to BigCommerce.

store_v2_default

Default access to store data

store_v2_products

Read and write access to products, variants, and collections

store_v2_products_read_only

Read-only access to products, variants, and collections

store_v2_orders

Read and write access to orders

store_v2_orders_read_only

Read-only access to orders

store_v2_customers

Read and write access to customer data

store_v2_customers_read_only

Read-only access to customer data

store_v2_content

Read and write access to store content (pages, blogs)

store_v2_content_read_only

Read-only access to store content

store_v2_marketing

Read and write access to marketing data (coupons, banners)

store_v2_marketing_read_only

Read-only access to marketing data

store_v2_information

Read and write access to store information

store_v2_information_read_only

Read-only access to store information

What Authpipe handles for BigCommerce

OAuth Orchestration

PKCE, state validation, callback handling, and provider-specific quirks — all automatic.

Encrypted Vault

AES-256-GCM encryption with per-tenant key isolation. OAuth tokens, API keys, and webhook secrets — never exposed to the frontend.

Silent Refresh

Proactive token refresh before expiry. SDK returns from local cache with zero latency.

Health Monitoring

Scheduled checks detect revoked tokens and expired credentials before users notice.

More Commerce providers

Ready to connect BigCommerce?

Get your first 100 connections free. Set up in minutes with our SDK.