Overview

Interaction scheme

Authorization

Authorization of the request occurs by generating and transmitting the JWS token of the request in the X-JWS-Signature header. JWS is the part of the JWT token that contains only header and signature.
Format of the transmitted data is application/json.

Example of signature formation

Request body

{
    "request_id": "828cf71d-a447-4a67-a149-c1df8bc197ca",
    "name": "Название юридического лица",
    "bin": 123456789012,
    "ceo_info": {
        "first_name": "Имя",
        "last_name": "Фамилия",
        "phone": 77017777777,
        "email": "mail@example.kz"
    },
    "address_info": {
        "country": "KZ",
        "postal_code": "050000",
        "address_line1": "Almaty",
        "address_line2": "Zheltoksan",
        "address_line3": "115" 
    },
    "iban": "KZ12345B789012345KZT",
    "description": "Новый партнер"
}

JWT token header

{
    "uri": "/v5/partner/client/add",
    "auth_id": "123456",
    "method": "POST",
    "params": "",
    "alg": "HS256"
}

The partner's key can be secret_key. In this case, the following JWT token can be generated:

eyJ1cmkiOiIvdjUvcGFydG5lci9jbGllbnQvYWRkIiwiYXV0aF9pZCI6IjEyMzQ1NiIsIm1ldGhvZCI6IlBPU1QiLCJwYXJhbXMiOiIiLCJhbGciOiJIUzI1NiJ9.eyJyZXF1ZXN0X2lkIjoiODI4Y2Y3MWQtYTQ0Ny00YTY3LWExNDktYzFkZjhiYzE5N2NhIiwibmFtZSI6ItCd0LDQt9Cy0LDQvdC40LUg0Y7RgNC40LTQuNGH0LXRgdC60L7Qs9C-INC70LjRhtCwIiwiYmluIjoxMjM0NTY3ODkwMTIsImNlb19pbmZvIjp7ImZpcnN0X25hbWUiOiLQmNC80Y8iLCJsYXN0X25hbWUiOiLQpNCw0LzQuNC70LjRjyIsInBob25lIjo3NzAxNzc3Nzc3NywiZW1haWwiOiJtYWlsQGV4YW1wbGUua3oifSwiYWRkcmVzc19pbmZvIjp7ImNvdW50cnkiOiJLWiIsInBvc3RhbF9jb2RlIjoiMDUwMDAwIiwiYWRkcmVzc19saW5lMSI6IkFsbWF0eSIsImFkZHJlc3NfbGluZTIiOiJaaGVsdG9rc2FuIiwiYWRkcmVzc19saW5lMyI6IjExNSJ9LCJpYmFuIjoiS1oxMjM0NUI3ODkwMTIzNDVLWlQiLCJkZXNjcmlwdGlvbiI6ItCd0L7QstGL0Lkg0L_QsNGA0YLQvdC10YAifQ.HR6MSeTvX6MFbug2619WEUf2TyoQTi9XUKVU4QtXNAQ

This line is the signature of the request and must be passed in the request header parameter X-JWS-Signature.

eyJ1cmkiOiIvdjUvcGFydG5lci9jbGllbnQvYWRkIiwiYXV0aF9pZCI6IjEyMzQ1NiIsIm1ldGhvZCI6IlBPU1QiLCJwYXJhbXMiOiIiLCJhbGciOiJIUzI1NiJ9..HR6MSeTvX6MFbug2619WEUf2TyoQTi9XUKVU4QtXNAQ

Supported HS256 signature encryption algorithm.

Interaction scheme#

Authorization#

Example of signature formation#

Request body#

JWT token header#

Interaction scheme

Authorization

Example of signature formation

Request body

JWT token header