Introduction to Backend API

Shopsys Framework backend API is an interface to the application that is dedicated for integration with your third party systems systems (like IS, storage system, ERP, ...). We use REST (implemented using FOSRestBundle) with JSON format and OAuth2 authorization (implemented using oauth2-bundle).


The backend API is not a part of the Shopsys Framework by default and you have to install it by yourself. Please follow simple installation instructions.

Try it

You need to create OAuth2 client in database and configure OAuth2 first

Easy steps to do that are described in API Authentication - OAuth2 article.

Get the Bearer token that is used for authentication when accessing API

curl -X POST \
  '' \
  -d 'grant_type=client_credentials' \
  -d 'client_id=PASTE_CLIENT_ID_HERE' \
  -d 'client_secret=PASTE_CLIENT_SECRET_HERE'

When the credentials are correct, you'll get a similar response


Don't be surprised, the access_token is long.

Get list of products

Use the access_token (eg. eyJ...lKQ) for the request Bearer authorization

curl -X GET \
  '' \
  -H 'Authorization: Bearer eyJ...lKQ'

And if you've copied the token correctly, you'll receive list of products, eg.

        "uuid": "48c846f8-4558-4304-8ccb-83d9cbca8ed8",
        "name": {
            "en": "22\" Sencor SLE 22F46DM4 HELLO KITTY",
            "cs": "22\" Sencor SLE 22F46DM4 HELLO KITTY"
        "hidden": false,
        "sellingDenied": false,
        "sellingFrom": "2000-01-16T00:00:00+0000",
        "catnum": "9177759",
        "ean": "8845781245930",
        "partno": "SLE 22F46DM4",
        "shortDescription": {
            "1": "Television LED ... playback",
            "2": "Sencor SLE 22F46DM4 Hello Kitty ... zaujme!"
        "longDescription": {
            "1": "Television LED, 55 ... B",
            "2": "<p><strong>Sencor SLE ... &nbsp;</p> "

If the token is invalid, you'll get 401 HTTP response code.

Note: For debugging and testing the API, we recommend using Postman application.

Extensibility of the API

If you need to extend your backend API, you can follow the cookbooks:

If you need to overwrite an existing core endpoint, you can create a custom one and use the same route settings to overwrite the one from the core, e.g. provided there is a GET route products/ in the core, you need to add your own action for the same route:


namespace Shopsys\ShopBundle\Controller\Api\V1\Product;

use FOS\RestBundle\Controller\AbstractFOSRestController;
use FOS\RestBundle\Controller\Annotations\Get;
use Symfony\Component\HttpFoundation\Response;

class MyCustomController extends AbstractFOSRestController
     * @Get("/products")
     * @return \Symfony\Component\HttpFoundation\Response
    public function MyCustomProductsAction(): Response
      // ...

API Versioning

If you are interested how is API versioned in Shopsys Framework see API Versioning article.

API Methods

If you are interested what methods does Shopsys Framework API support see API Methods article.