Portal authorization

After your app is approved, authorize channels in the developer portal before calling procurement or fulfillment APIs.

Fulfillment mode (per app)

Mode	Who holds tokens	Procurement API	International shipping
Self fulfillment (default)	You (OAuth / manual JSON per channel)	Gateway → marketplace	Not available
HIOBuy warehouse	HIOBuy (one warehouse developer code)	Gateway → HIOBuy warehouse API	/v1/fulfillment/*

Self fulfillment

For each enabled channel (Taobao, 1688, …):

1. Open Authorizations → select app → Authorize
2. Paste OAuth credentials or complete OAuth when available
3. Portal shows status, account name, expiry — never full tokens

HIOBuy warehouse fulfillment

1. Obtain a warehouse developer code from HIOBuy ops
2. Portal → Authorizations → choose Use HIOBuy fulfillment
3. Enter the code once — Taobao, 1688, and Weidian bind in a single step
4. Portal lists each channel’s status and expires_at (tokens are not visible or editable)

Switching back to self fulfillment clears warehouse binding; you will be prompted to confirm.

What you never send in API calls

• Marketplace access tokens
• Warehouse developer code (Gateway attaches it server-side)

Only Authorization: Bearer hio_live_… on https://api.hiobuy.com.

Next: Fulfillment & shipments API