Authentication

Before you can call any API endpoint, you must first acquire an OAuth 2 authorization token. This is done by calling the following POST endpoint:

POST /api/v1/access-token/b2b

Request

Parameter	Data Type	Description
grantType	String	value must be client_credentials
additionalInfo	Object

Request Body

{
   "grantType":"client_credentials"
   "additionalInfo":{}
}

Response

Parameter	Data Type	Description
accessToken	String
additionalInfo	Object
expiresIn	String
responseCode	String
responseMessage	String
tokenType	String

Response Body

{
    "accessToken": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJiZDYzMTU2ODQzOWE0YzZlYTExMTNmMjhhMzdlMWY4MiIsImV4cCI6MTY2MjA1ODE2MX0.4hQt4fBhqPBeDtea6Y8HMCp8YxHoYH-VZRlSszl-7dMwM_cPOxnsdQZJiR1WbHR6JamweBro-14FFXXfA1rkhQ",
    "additionalInfo": {},
    "expiresIn": "53999",
    "responseCode": "2007300",
    "responseMessage": "Successful",
    "tokenType": "Bearer"
}

Curl Example

Header	Value
Content-Type	application/json
X-TIMESTAMP	Client's current local time in yyyy-MM-ddTHH:mm:ssTZD
X-CLIENT-KEY	Client`s client_id (given at Create Credentials)
X-SIGNATURE	Service’s signature (given at Authentication signature)

curl --location --request POST \
'http://127.0.0.1:8081/api/v1/access-token/b2b' \
--header 'X-TIMESTAMP: 2022-08-10T00:00:00+07:00' \
--header 'X-CLIENT-KEY: 626dba03cfa64d369e1cc9f647914a2e' \
--header 'X-SIGNATURE: 3c6a216e22f418189812b333b9fd4e06b321b8324c1158a1905db29e7ffc2aaab81e43def33110b2c9f880511294b9e3f340f93d7c958d43372c2d72198be86a' \
--header 'Content-Type: application/json' \
--data-raw '{
   "grantType":"client_credentials",
   "additionalInfo":{}
}'