Infopago API Documentation

Get an access token.

POST

/oauth/token

Authentication

The initial step in utilizing the corporate API is the authentication process. During this step, the authorization server will validate the client's credentials and then issue a token.

The ONZ API employs OAuth 2.0 Bearer Tokens for request authentication. Every API request necessitates inclusion of a bearer token. After obtaining the access token, you can utilize any of the API endpoints outlined below (based on the scopes granted to your app), incorporating the access token within the HTTP Authorization Header.

Scopes

Scopes establish the extent of access that a token will possess in relation to resources within the ONZ platform.

Resource	Read Scope	Write Scope	Accessible Using
Pix	pix.read	pix.write	Corporate token
Billets	billets.read	billets.write	Corporate token
Webhook	webhook.read	webhook.write	Corporate token
Transactions	transactions.read		Corporate token
Account	account.read		Corporate token
Infractions	infractions.read	infractions.write	Corporate token

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://infopago.apidog.io//oauth/token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "clientId": "5e505642-9024-474d-9434-e5a44f505cc5",
    "clientSecret": "string",
    "grantType": "client_credentials",
    "scope": "string"
}'

Response Example

201 - Exemplo 1

{
    "tokenType": "string",
    "expiresAt": 0,
    "refreshExpiresIn": 0,
    "notBeforePolicy": 0,
    "accessToken": "string",
    "scope": "string"
}

Requisição

Parâmetros Bodyapplication/json

clientId

string <uuid>

requerido

clientSecret

string

requerido

grantType

string

requerido

Padrão:

client_credentials

scope

string

opcional

Examples

Respostas

🟢201Created

application/json

Created

Body

tokenType

string

opcional

expiresAt

integer <int32>

opcional

refreshExpiresIn

integer <int32>

opcional

notBeforePolicy

integer <int32>

opcional

accessToken

string

opcional

scope

string

opcional

🟠400Bad Request

🟠401Unauthorized

🔴500Server Error

Página anterior

Consultar webhooks cadastrados.

Próxima página

Get customer account transactions.