Skip to main content

Authentication Method

What I need to use the Payment API

An HTTP Basic Authentication is needed in order to use an Online Payment API. To do so, you need to know the merchant’s unique credentials for accessing the system. The credentials consist of two parameters: client_id and secret_key, which are used as a username and a password for the Merchant Authentication.

How to find out the Merchant’s system credentials

The company receives the client_id and the secret_key once it has been registered in the Bank system as a Merchant and has filled in all necessary data. Those credentials are the unique identifier for the Merchant. Along with that, a secret_key is used as a password. It is prohibited to make it public or disclose to a third party. Violation might increase the likelihood of danger for an Online Shop! Secret_key cannot be changed by the Merchant.

Method Description

Via the given method a Merchant passes the authentication. On calling this method, the Online Payment Server returns a ‘Bearer Token’ which is used as a mandatory parameter for the authentication when calling all further methods.

client_id: 1006
secret_key: 581ba5eeadd657c8ccddc74c839bd3ad

Header:
Authorization: Basic MTY2Njo1ODFiYTVlZWFkZDY1N2M4Y2NkZGM3NGM4MzliZDNhZA==
POST /api/v1/oauth2/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Authorization: Basic <base64>
grant_type=client_credentials