APIs for Businesses (Test)
Home
Services
  • Checkout / Deeplink
  • Merchant Proxy
Home
Services
  • Checkout / Deeplink
  • Merchant Proxy
  1. CHECKOUT/ DEEPLINK
  • CHECKOUT/ DEEPLINK
    • Overview
    • Webhook
    • Full Example
    • FAQ
    • MOBILE SDKS
      • Flutter SDK
      • iOS SDK
      • Android SDK
    • WEB SDKS
      • Web SDK
    • Transaction Initiation
      POST
    • Transaction Verification
      POST
    • Authorization
      POST
  1. CHECKOUT/ DEEPLINK

Authorization

POST
https://bankapi-demo.bill24.net/security/authorize
This endpoint is used to authorize users to obtain a token for accessing the API.
NOTE
Bank is required to initiate an authorization process to obtain a token for accessing all API endpoints.
if token expired you can use refreshToken to get new token.
Required fields: client_id secret refreshToken

Request

Header Params
Accept
string 
optional
Example:
application/json
Content-Type
string 
optional
Example:
application/json
Authorization
string 
optional
Example:
Bearer [your token]
Body Params application/json
email
string 
required
Email provide by Bill24
password
string 
required
Password provide by Bill24
clientId
string 
required
key provide by Bill24
secret
string 
required
key provide by Bill24
refreshToken
string 
optional
Example
{
  "email": "demobank@gmail.com",
  "password": "demobank",
  "clientId": "bank_client",
  "secret": "Wuq98rPLwYfvDJ2e",
  "refreshToken": ""
}

Request samples

Shell
JavaScript
Java
Swift
Go
PHP
Python
HTTP
C
C#
Objective-C
Ruby
OCaml
Dart
R
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request POST 'https://bankapi-demo.bill24.net/security/authorize' \
--header 'Content-Type: application/json' \
--data-raw '{
  "email": "demobank@gmail.com",
  "password": "demobank",
  "clientId": "bank_client",
  "secret": "Wuq98rPLwYfvDJ2e",
  "refreshToken": ""
}'

Responses

🟢200OK
application/json
Body
issuer
string 
optional
token
string 
optional
Bearer token use to access API (expire in1 hour )
refreshToken
string 
optional
Can use to get a new bearer token
tokenExpireTime
string 
optional
Expiration time
userId
string 
optional
User identity
email
string 
optional
fullname
string 
optional
permissions
array[string]
optional
isNeedChangePassword
boolean 
optional
passwordNeverExprie
boolean 
optional
passwordExpireIn
number 
optional
isPasswordExpire
boolean 
optional
Example
{
    "issuer": "http://dc.oone.bz:40011",
    "token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IjZCOUY3RDZBMjA2MTQxQzkzQ0I2NEVFNjRGOTBBNUQwQTQzOTZDODBSUzI1NiIsInR5cCI6ImF0K2p3dCIsIng1dCI6ImE1OTlhaUJoUWNrOHRrN21UNUNsMEtRNWJJQSJ9.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.hi4WZFmbuXImmCePmn3Ott5Oftu0760p75e-9teLGswqLXK3ah6-4WLzfFZ3oEYL-TMjXKqs7_VKPXBz4nDZUdMQZf0MiXabH6IJiHDgbR72d1eiA44x1E8D8ff7R4BteBQY8DYrHQgB6PVL4TRlzgSGU6-fv2HQ_Dg2-o8mGy0WEKA61bAkzsKHrdSq0XeN3Qm2JIgBRV2afV1uux44wVnAxINhURkH_t0ChEeVzR0HwdCw9CnWHY04blE7zLpzuhyGrnRsOXgr4gXDVJ3_Do5bxQwhFw-PtzkQtm024wzMVuS1URTu3EGfLtFAFZdoNG0dvLej8ce3xOq0IMCdnA",
    "refreshToken": "7DFB50A51E1B2CE420B154DE041FD1D3BC5777C07F43D427D328EB37E9A7C112",
    "tokenExpireTime": "2023-08-24T16:42:21.9110603+07:00",
    "userId": "0b2e17be-d225-4f79-b6a9-98fa811a769c",
    "email": "admin@ubill24.com",
    "fullname": "Administrator",
    "permissions": null,
    "isNeedChangePassword": false,
    "passwordNeverExpire": false,
    "passwordExpireIn": 2147483647,
    "isPasswordExpire": false
}
🟠404Record not found
🟠400Invalid input
Modified at 2024-01-17 04:50:58
Previous
Transaction Verification