O Auth
OAuth 2.0 authentication flow
Start OAuth Authorization
Start the OAuth 2.0 authorization code flow. Redirect users to this endpoint to request permission to make payments on their behalf.
Query Parameters
client_idRequired
stringYour application identifier
redirect_uriRequired
stringURL to redirect after authorization
Format:
"uri"stateRequired
stringCSRF protection token (returned unchanged)
scopestringSpace-separated scopes
Default:
"payments:sign balance:read"response_typeRequired
stringMust be "code"
Value in:
"code"code_challengestringPKCE code challenge (recommended)
code_challenge_methodstringPKCE method
Default:
"S256"Value in: "S256"promptstringControls consent behavior:
none: Silent auth only (error if consent needed)consent: Force consent screenlogin: Force re-authentication
Value in:
"none" | "consent" | "login"Redirect to consent page or callback
Exchange Tokens
Exchange authorization code for access token, or refresh an access token.
Request Body
application/jsonRequiredbodyRequired
object | objectTokens issued successfully
OAuth Server Metadata
OAuth 2.0 Authorization Server Metadata (RFC 8414)
Server metadata