Authentication Overview
Authentication is performed using a two-step process. The initial step uses Basic Authentication to validate system credentials, after which an access token in the form of a JSON Web Token (JWT) is issued. This token represents an authenticated session and must be included in all subsequent API requests.
Unauthorized requests or requests made with expired or invalid tokens will be rejected by the system.
Basic Authentication
Basic Authentication is required only for generating an access token. API consumers are provided with a unique username and password by the CellPay team during onboarding. These credentials are environment-specific and must be kept confidential. The Basic Authentication credentials must not be used directly for payment or service APIs and should be transmitted securely at all times.
username: Access information provided by the Cellpay Team.
password: Access information provided by the Cellpay Team.
Access Token (JWT) Generation
Upon successful authentication using Basic Authentication, CellPay issues a JSON Web Token (JWT), referred to as the access token. This token serves as proof of authentication and must be included in the request headers when calling protected APIs. The access token encapsulates session information and authorization context required by the CellPay system to process requests securely.