Starting on June 5, 2023, UPS will be phasing out the current Access Key-based authorization method for its APIs. Access keys will no longer be issued, and beginning from June 3, 2024, all API transactions with UPS will require clients to adopt the OAuth security model. This entails including a bearer token with each API request.
Moreover, UPS has introduced updates to its APIs, transitioning to a more flexible RESTful pattern. This new approach grants UPS and its clients the freedom to modify API payloads without adhering to strict schema requirements. Consequently, the endpoints supporting Access Key authentication and the older API structure will be gradually phased out in the future.
These changes reflect UPS's commitment to enhancing
API security and ensuring a seamless experience for its clients. By embracing the OAuth security model, UPS aims to bolster data protection and provide a more streamlined interaction with its services. The transition to RESTful APIs allows for increased adaptability, allowing both UPS and its clients to tailor API functionalities to meet evolving needs.