Heads up people!

After 6 hours of digging through the code base this line stood out:

$this->guard = request()->has('token') ? 'api' : 'customer';

It means even if you have the header set correctly, your mobile application will still not authenticate. So, to solve this, what you need to do is add:

cartItem.put("token",sharedPref.getCustomerApiToken());

On all objects that need to be authenticated. If stuck reach-out.

Officially, its not supported. But there is a dirty sure way of going about it. Here is what I did:

1. Installed bagisto as recommended
2. move the vendor/bagisto/bagisto folder to packages.
3. Edit the main composer.json file changing

"bagisto/bagisto": "2.*"

to

"bagisto/bagisto": "@dev"

4. Edit the main composer.json file adding repository array like:

"repositories": [
        {
            "type": "path",
            "url": "packages/bagisto",
            "options": {
                "symlink": true
            }
        }
    ]

5. Then run composer update