This information can only be gathered from OCAPI with a business manager login:
Example authentication request / response (I use sandbox client_id):
POST https://iteliosXX-alliance-prtnr-eu07-dw.demandware.net/dw/oauth2/access_token?client_id=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Content-Type: application/x-www-form-urlencoded
cache-control: no-cache
Postman-Token: 5a73e33a-23a9-45a9-a942-d45204502bb9
Authorization: Basic xxxxxxxxxxxxx
User-Agent: PostmanRuntime/7.6.0
Accept: */*
Host: iteliosXX-alliance-prtnr-eu07-dw.demandware.net
cookie: dwsid=2IeGfCl4glug3k_eevyvGASfloEJ41MvZ21N3JXUhwV7BHzSty8g22fqYlbDIHzBjpQoKoK6UjBmERyxWPApdg==; cqcid=bcrzVR9FbnIZwa0r35B0VhRc6L; sid=HFEGvfualJeFyFWPh53SIJAS3zNG51IPc48; dwanonymous_5eac94f25e98e4dcb13b163dcfcb7651=bcrzVR9FbnIZwa0r35B0VhRc6L; dwsecuretoken_5eac94f25e98e4dcb13b163dcfcb7651=XAPaYwKFBYrRONspgSspTFoGiPIgQy4BQw==; __cq_dnt=1; dw_dnt=1
accept-encoding: gzip, deflate
content-length: 93
grant_type=urn:demandware:params:oauth:grant-type:client-id:dwsid:dwsecuretoken
HTTP/1.1 200
status: 200
Accept-Ranges: bytes
Keep-Alive: timeout=5
x-dw-request-base-id: W1leyCV6f1xlAAAK
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 94
Date: Wed, 06 Mar 2019 07:43:33 GMT
Server: Apache
{"access_token":"87a90297-6610-4ccd-8bbd-
c328fec80f5c","expires_in":899,"token_type":"Bearer"}
example basket request / response (pay attention to the access token):
GET https://iteliosXX-alliance-prtnr-eu07-dw.demandware.net/s/RefArchGlobal/dw/shop/v19_1/customers/abgnAf57gth8XEZ3lVMG3dJyzI/baskets
Origin: http://www.sitegenesis.com
x-dw-client-id: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Content-Type: application/json
Authorization: Bearer xxxxxxxxxxxxxxxx
cache-control: no-cache
Postman-Token: 4a6d7c88-1d26-4495-b60f-b671065ce352
User-Agent: PostmanRuntime/7.6.0
Accept: */*
Host: itelios-alliance-prtnr-eu07-dw.demandware.net
cookie: dwsid=2IeGfCl4glug3k_eevyvGASfloEJ41MvZ21N3JXUhwV7BHzSty8g22fqYlbDIHzBjpQoKoK6UjBmERyxWPApdg==; cqcid=bcrzVR9FbnIZwa0r35B0VhRc6L; sid=HFEGvfualJeFyFWPh53SIJAS3zNG51IPc48; dwanonymous_5eac94f25e98e4dcb13b163dcfcb7651=bcrzVR9FbnIZwa0r35B0VhRc6L; dwsecuretoken_5eac94f25e98e4dcb13b163dcfcb7651=XAPaYwKFBYrRONspgSspTFoGiPIgQy4BQw==; __cq_dnt=1; dw_dnt=1
accept-encoding: gzip, deflate
HTTP/1.1 200
status: 200
Accept-Ranges: bytes
Keep-Alive: timeout=5
x-dw-request-base-id: W1mSyNF6f1xlAAAK
Access-Control-Allow-Origin: http://www.sitegenesis.com
Access-Control-Expose-Headers: etag,location,x-dw-version-status,x-dw-resource-state,authorization,x-dw-request-base-id
Access-Control-Allow-Credentials: true
Allow: GET,HEAD,OPTIONS
x-dw-version-status: deprecated
Cache-Control: max-age=0,no-cache,no-store,must-revalidate
vary: accept-encoding
Content-Encoding: gzip
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Wed, 06 Mar 2019 07:46:26 GMT
Server: Apache
{"_v":"19.1","_type":"baskets_result","baskets":....
Dont forget to set the proper client permissions in business manager for your client_id. See below example from the documentation which should be enabled for the SHOP API on a site or global level.
{
"_v":"19.1",
"clients":
[
{
"allowed_origins":
["http://www.sitegenesis.com","https://secure.sitegenesis.com"],
"client_id":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"response_headers":{"x-foo":"bar","P3P":"CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\""},
"resources":
[
{
"resource_id":"/product_search",
"methods":["get"],
"read_attributes":"(**)",
"write_attributes":"(**)",
"cache_time":900,
"version_range":{"from":"19.1"}
},
{
"resource_id":"/products/*/bundled_products",
"methods":["get"],
"read_attributes":"(c_name,c_street)",
"write_attributes":"(**)"
},
{
"resource_id":"/baskets/*/items",
"methods":["post"],
"read_attributes":"(**)",
"write_attributes":"(product_id, quantity)"
}
]
}
]
}