JWT Authentication

Create access token

post

Generates a JWT access token using client credentials for Web SDK calls.

Header parameters

authorizationstring · min: 1 · max: 512Required

Technical identifier pre-defined at on-boarding that identifies the API consumer. Format shall be the string 'APIKEY' followed by a space and the api key value.
Example: APIKEY c03f88fe-01ba-11e8-ba89-0ed5f89f718b

x-correlation-idstring · min: 1 · max: 36Required

Technical identifier used for troubleshooting.
It helps on customer support when needed.
Each API request must be identified with a unique correlation Id.
It correlates the response and the request and eventually a notification if any.

Body

application/json

merchantIdstring · min: 1 · max: 128Required

Identifier of the merchant provided by Thales at on-boarding.

tokensstring[] · min: 1 · max: 10Required

The list of tokens to be associated with the JWT, only Mastercard and Visa tokens allowed, all the tokens must belong to the same merchant

Example: ["COFTG-MS-ce464906-cf39-4990-b4a8-c160e67c603a","COFTG-V-fe464806-sd39-1290-a4t8-f160e37c602b"]

scopestring · enum · max: 32Required

Scope used for the access token generation

Possible values:

Responses

200

Access token successfully generated

application/json

accessTokenstringRequired

Access token generated for WEB SDK calls, JWT content:

• exp
• iss
• iat
• aud
• sub
• trId
• scope

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

400

Bad request - Not Retryable

401

Unauthorized - Not Retryable

404

Not Found - Not Retryable

429

Too Many Requests - Retryable

500

Internal Server Error - Not Retryable

503

Service Unavailable - Retryable

post/auth/accessToken

HTTPcURLJavaScriptPython

POST /tsh-cof/auth/accessToken HTTP/1.1
Host: thales.api.com
authorization: text
x-correlation-id: text
Content-Type: application/json
Accept: */*
Content-Length: 153

{
  "merchantId": "text",
  "tokens": [
    "COFTG-MS-ce464906-cf39-4990-b4a8-c160e67c603a",
    "COFTG-V-fe464806-sd39-1290-a4t8-f160e37c602b"
  ],
  "scope": "PAYMENT_PASSKEY"
}

{
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}