Phone-First Checkout

Install via /api/oauth/install, then open /admin?store_id=… to configure OTP and messaging APIs.

Configure only ECWID_CLIENT_ID, ECWID_CLIENT_SECRET, and PORT in the on-disk .env file. App domain is detected automatically from the request host.

Data is stored in Ecwid Application Storage (no hosted database). Install tokens are kept in local data/installs.json so webhooks can authenticate.

<script
  src="https://YOUR_HOST/storefront.js"
  data-api-base="https://YOUR_HOST"
  data-store-id="YOUR_STORE_ID"
  async
></script>