Skip to main content

Overview

JH PayCenter Instant Payments APIs utilize the OAuth 2.0 protocol to ensure secure access. Every API request must include a valid Bearer token in the Authorization header.

Token Generation Process​

Before accessing JH PayCenter Instant Payments APIs, clients must obtain an access token by calling the OAuth 2.0 Token API. This token acts as a credential to authenticate the client and authorize access to protected resources.

  • The access token must be included in all API requests in the format: Authorization: Bearer <access_token>.
  • The access token must be kept secret.
  • Tokens are valid for a limited time, after which a new token must be requested.

Authentication Methods​

JH PayCenter Instant Payments APIs support OAuth 2.0 client credentials flows:

MethodWhen to use
Client Credentials with Client SecretLegacy flow. Available to existing/already-onboarded clients only.
Client Credentials with Private KeyRecommended. Required for all new clients onboarding after October 2026, and for existing clients by October 2028.

Refer to the respective pages above for setup details and the API Reference section for request and response specifications.