Kokhanenko: B2B Catalog API

What this solution does

The Kokhanenko: B2B Catalog API module adds a managed API to 1C-Bitrix sites for exporting catalogs to external systems: dealer portals, partner showrooms, mobile applications, CRM, PIM, BI reports, and integration services.

The module is designed not for mass price list export, but for securely providing catalog data to external systems, partners, dealers, and client applications via a protected API with individual tokens and access restrictions.

The solution allows providing different data sets to different clients rather than the entire catalog to everyone. A separate API token can be created for each external client; tokens can be grouped, and restrictions can be configured for response fields, price types, catalog sections, and product property values.

The API returns products, active sections, and the count of available items. It supports JSON and XML formats, pagination, Bearer authorization, file download of responses, and a public HTML page /api/ with a brief guide to the endpoints.

This solution is suitable for online stores and B2B portals on 1C-Bitrix, as well as companies that distribute catalogs to dealers, partners, or franchisees.

The Kokhanenko: B2B Catalog API module is designed for integrating external websites, mobile applications, CRM, PIM, and BI systems with a product catalog. It enables teams to manage access rights to prices, stock levels, product properties, and catalog sections independently.

Key features include product endpoints at /api/v1/products, /api/v1/products.json, and /api/v1/products.xml, as well as a product count endpoint at /api/v1/products/count supporting both JSON and XML formats. The categories endpoint /api/v1/categories is available with JSON and XML support.

Authentication is handled via the Authorization: Bearer header. Legacy compatibility is maintained through the query parameter token. The system supports token groups and individual rules for specific tokens.

The API allows limiting response fields, restricting available price types, excluding specific sections from results, and filtering products by property values. Access Control Lists (ACL) are applied before pagination, ensuring consistent counting of the available product set across /products and /products/count endpoints.

Additional capabilities include selecting specific infoblock properties for external exposure, basic export of trade offers, prices, and stock levels. The API request log is maintained without storing full tokens or query strings. Successful responses include service fields api_version: v1 and schema_version: 1.0.

Security

The module does not store full plain tokens in the database. The complete token value is displayed only once during creation or reissue; thereafter, administrative lists show only the prefix. For production integrations, Bearer authorization is recommended to prevent tokens from appearing in URLs, access logs, or browser history. The request log records the endpoint, method, status, duration, IP address, token or user ID, and a hash of the query string. Full tokens and original query strings are not written to the log.

General iT can install and configure this module and check how it works on your website.