API Tokens

The pawaPay Merchant API can only be used with an authentication token. You can read more about how this token can be used to access our API from our API docs. 

This functionality is available to users with the Technical Administration role. Read more about User roles.

Generating an API token

Press the "Generate Token" button to generate an API token. You can have at most 2 active API tokens at a time. 

You can use the "Copy to clipboard" button to easily copy the API token.

Active API tokens

Your active API tokens are listed together with the information about who generated them, when they were generated and the Token ID. Note that the Token ID, is not usable as the token, but only used for identifying a specific token, when contacting our support team. 

Revoking tokens

If you need to revoke an API token, you can press the "Revoke" button which is found under the "Actions" column.

Signed requests

You can enable pawaPay to only accept signed requests for financial calls. You will need to provide us the public key of the key pair you aresigning your requests with.

Accepted algorithms

We accept 4 kinds of encryption algorithims:

• RSASSA-PSS Using SHA-512

• RSASSA-PKCS1-v1_5 Using SHA-256

• ECDSA Using Curve P-256 DSS and SHA-256

• ECDSA Using Curve P-384 DSS and SHA-384

Adding a public key

You can add your public key by navigating to the Security tab and pressing on “Add public key”

You will then be presented a window where you can:

1. Name your key

2. Add the key

3. Choose if you wish to enable the feature by adding this key or not

Please note!

You can choose to either add a key alone or add a key and enable the feature.

After successfully adding a key you will be able to view and remove it.

You can also switch this feature on and off by using this slider. Switching the feature off will not remove any existing keys.