Skip to main content

Authentication

KODIPAY uses OAuth2 with the client_credentials grant.

In v1, merchants only send:

  • grant_type
  • client_id
  • client_secret

The returned Bearer token must then be sent in the Authorization header for all merchant requests.

curl -X POST https://api-kodipay.kodinet.cd/oauth/token \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{
    "grant_type": "client_credentials",
    "client_id": "your-client-id",
    "client_secret": "your-client-secret"
  }'

Use the token like this:

Authorization: Bearer YOUR_ACCESS_TOKEN

See the exact endpoint details in API Reference.