{"id":340,"date":"2024-06-19T14:53:57","date_gmt":"2024-06-19T14:53:57","guid":{"rendered":"https:\/\/developers.10npay.com\/?post_type=docs&p=1166"},"modified":"2026-05-19T14:57:00","modified_gmt":"2026-05-19T14:57:00","password":"","slug":"merchant-authentication","status":"publish","type":"docs","link":"https:\/\/developers.10npay.com\/bg\/docs\/merchant-authentication\/","title":{"rendered":"Client Authentication"},"content":{"rendered":"

How to authenticate your app against the Tenn.Pay platform using OIDC<\/span><\/span><\/span> and call the API.<\/p>\n

1. Configure your OIDC<\/span> client<\/h2>\n

Use any compliant OIDC<\/span> library (e.g. oidc<\/span>-client<\/code> \/ oidc<\/span>-client-ts<\/code> on web, AppAuth<\/code> on mobile). Flow: Authorization Code + PKCE<\/span><\/span><\/span><\/strong>.<\/p>\n

\n
<\/div>\n
\n
\n
\n
\n\n<\/colgroup>\n\n\n
\n
\n

Setting<\/p>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/th>\n
\n
\n

Value<\/p>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
<\/div>\n\n<\/colgroup>\n\n\n\n\n\n\n\n\n\n
\n
\n

Setting<\/p>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/th>\n
\n
\n

Value<\/p>\n

\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<\/th>\n<\/tr>\n
\n

Authority \/ Issuer<\/p>\n<\/td>\n

\n

https:\/\/api.10npay.com<\/code> (provided per environment)<\/p>\n<\/td>\n<\/tr>\n

\n

Client ID<\/p>\n<\/td>\n

\n

ClientName_Oidc<\/code><\/p>\n<\/td>\n<\/tr>\n

\n

Response type<\/p>\n<\/td>\n

\n

code<\/code><\/p>\n<\/td>\n<\/tr>\n

\n

Redirect URI<\/p>\n<\/td>\n

\n

<https:\/\/<your-app>>\/auth-result<\/code><\/p>\n<\/td>\n<\/tr>\n

\n

Post-logout redirect URI<\/p>\n<\/td>\n

\n

<https:\/\/<your-app>>\/Logout<\/code><\/p>\n<\/td>\n<\/tr>\n

\n

Silent renew URI<\/p>\n<\/td>\n

\n

<https:\/\/<your-app>>\/silentRenew<\/code><\/p>\n<\/td>\n<\/tr>\n

\n

Scopes<\/p>\n<\/td>\n

\n

openid profile IdentityServerApi offline_access tenant TokenserverAPI.read TokenserverAPI.write Tenn.CRM Tenn.Messaging Tenn.Issuing Tenn.RiskService Tenn.Payment Tenn.FastPay<\/code><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

Standard discovery endpoints (under the issuer):<\/p>\n

    \n
  • \n

    \/connect\/authorize<\/code><\/p>\n<\/li>\n

  • \n

    \/connect\/token<\/code><\/p>\n<\/li>\n

  • \n

    \/connect\/userinfo<\/code><\/p>\n<\/li>\n

  • \n

    \/connect\/endsession<\/code><\/p>\n<\/li>\n

  • \n

    \/connect\/revocation<\/code><\/p>\n<\/li>\n<\/ul>\n

    2. Get an access token<\/h2>\n
      \n
    1. \n

      Trigger signinRedirect()<\/code> \u2014 the user is bounced to the auth server, signs in, and is redirected back to your redirect_uri<\/code> with a code<\/code>.<\/p>\n<\/li>\n

    2. \n

      On the callback page, call signinRedirectCallback()<\/code> to exchange the code for tokens.<\/p>\n<\/li>\n

    3. \n

      Read user.access_token<\/code> (JWT) from the returned user object.<\/p>\n<\/li>\n<\/ol>\n

      3. Call the API<\/h2>\n

      Attach the access token to every request:<\/p>\n

      \n
      \n
      \n
      \n
      \n
      <\/div>\n
      \n
      <\/div>\n<\/div>\n<\/div>\n<\/div>\n

      Authorization: Bearer <access_token><\/span><\/code><\/span><\/div>\n<\/div>\n<\/div>\n

      That is the only auth requirement. The user identity is taken from the token \u2014 you do not need to pass any user ID or individual ID alongside it.<\/p>","protected":false},"excerpt":{"rendered":"

      How to authenticate your app against the Tenn.Pay platform using OIDC and call the API. 1. Configure your OIDC client Use any compliant OIDC library (e.g. oidc-client \/ oidc-client-ts on web, AppAuth on mobile). Flow: Authorization Code + PKCE. Setting Value Setting Value Authority \/ Issuer https:\/\/api.10npay.com (provided per environment) Client ID ClientName_Oidc Response type […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"doc_category":[49],"doc_tag":[],"knowledge_base":[33],"class_list":["post-340","docs","type-docs","status-publish","hentry","doc_category-authentication-tokenization","knowledge_base-10npay"],"year_month":"2026-05","word_count":219,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"10npaydev","author_nicename":"10npaydev","author_url":"https:\/\/developers.10npay.com\/bg\/author\/10npaydev\/"},"doc_category_info":[{"term_name":"Authentication\/Tokenization","term_url":"https:\/\/developers.10npay.com\/bg\/docs\/10npay\/authentication-tokenization\/"}],"doc_tag_info":[],"knowledge_base_info":[{"term_name":"10npay","term_url":"https:\/\/developers.10npay.com\/bg\/docs\/10npay\/","term_slug":"10npay"}],"knowledge_base_slug":["10npay"],"_links":{"self":[{"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/docs\/340","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/comments?post=340"}],"version-history":[{"count":1,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/docs\/340\/revisions"}],"predecessor-version":[{"id":361,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/docs\/340\/revisions\/361"}],"wp:attachment":[{"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/media?parent=340"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/doc_category?post=340"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/doc_tag?post=340"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/developers.10npay.com\/bg\/wp-json\/wp\/v2\/knowledge_base?post=340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}