The QuataPay Payment API uses API key-based authentication. You will need a merchant account to obtain your credentials.
/authentication/token request to get a Bearer tokenAlso called Primary Key. Identifies your merchant account. Safe to use as a reference.
Used to authenticate API calls. Never share it or commit it to source control.
POST credentials
Send client_id + secret_id to /authentication/token
Receive access token
API returns a Bearer token valid for 600 seconds
Include in requests
Authorization: Bearer {token}
Refresh when expired
Cache token, re-authenticate when you get a 401 response