Shopify、亞馬遜和TikTok商店

Shopify

連接您的Shopify商店，將產品資料匯入您的行銷活動，並將已完成的訂單轉化為忠誠度積分——無需編寫程式碼，只需商店網域和管理員API存取權杖。

// What the platform exposes for the Online Shop connection:
POST /api/shopify/connect      { "shopDomain": "my-store.myshopify.com", "accessToken": "shpat_…" }
GET  /api/shopify/status       // → { connected, shopDomain, status, lastSyncedAt, productCount, apiVersion }
POST /api/shopify/sync         // pull products now
POST /api/shopify/disconnect   // remove the connection + synced product data
//
// Orders: SocialHub receives Shopify order webhooks (order.fulfilled) and awards points
// keyed by the order id — idempotent, so a replayed webhook never double-awards.
// Connecting an Online Shop requires the Omnichannel plan.

TikTok 商店

與亞馬遜相同的驗證-不信任模型，針對 TikTok 商店合作夥伴 API。您授權您商店中的 TikTok 商店合作夥伴應用程式以取得應用程式金鑰/應用程式金鑰和刷新權杖。在設定 → 線上商店 → TikTok 商店（團隊管理員和系統管理員）下進行設定。

連接設定

金鑰 （靜態加密 · 只寫）

將「商店密碼」留空－「儲存並驗證」功能會從您的授權商店中自動尋找。 TikTok 會在每次刷新時輪換刷新令牌；平台會將輪換結果序列化並持久化，因此並發作業之間不會相互幹擾。

// Marketplace credentials (Amazon / TikTok Shop) are saved + liveness-checked here.
// Open to team admins (org_owner / org_admin) and system admins; tenant-isolated —
// an admin can only ever read/write their OWN team's channels.
POST /api/admin/channels            { teamId, kind: "amazon" | "tiktok", name, config, secrets }
POST /api/admin/channels/{id}/ping  // re-verify the connection (discovers shop refs / cipher)
//
// Secrets (refresh_token, client_secret, app_secret, …) are AES-GCM encrypted the
// instant they arrive — write-only, never returned, never logged.