Asymmetric in B2B Access Token in the Access Token B2B is used as an identifier for authentication. This Signature Access Token will be used to obtain the Access Token B2B.
Access Token B2B API header consists of the following fields:
Request Header
| Field Name | Field Type | Field Description |
|---|---|---|
| Content-Type | String (Required) | Type of the content. |
| X-TIMESTAMP | String (Required) | Using ISO 8601 as timestamp format. Transaction date time, in format YYYYMMDDTHH:mm:ss+07:00. Time must be in GMT+7 (Jakarta time). |
| X-SIGNATURE | String (Required) | Created using asymmetric signature SHA256withRSA algorithm. SHA256withRSA(PrivateKey, StringToSign). *StringToSign = client_ID+"|"+X-TIMESTAMP |
| X-CLIENT-KEY | String (Required) | Client’s client_id (given at the completion registration process) |
Steps to get the X-SIGNATURE :
| No | Steps |
|---|---|
| 1 | Private Key Merchant: -----BEGIN RSA PRIVATE KEY----- MIIBOgIBAAJBALJ2TeBT8RwskUV4tVUvEgOpkf+HNet3AqG9PtqEqqixIIGJ+O5C geoEmg6fO2gQ1Z0InaajuvL2JAMTRiPokwcCAwEAAQJAUEozfUKmzmMqtJO7GWkE 9MrcmZcOZjJz56qJ1awsT5onTvVjC42QPLrwIle2k3yGTk0MlVrgqzX9f5YCQWFP iQIhAPIkqwxzMNq8uSQBtouPniOadgUlnujnx4Ww0IU6z+h7AiEAvKy5rSJ1wQfP uJTBOeb9efDU2hrDLnVK3WBfuCfCx+UCIENhmsubHmQwEiEH7QFHFM15hRAHmQHc xbPZMR1x8TsTAiBFyZnQWYu2v53sx1EFitQ9M4B3wChr2cS8R7aAFmzspQIhANOz cv7BIB5HKrRxO+kOAfgNcv0/dS4kTUSSjFtzaylF -----END RSA PRIVATE KEY----- |
| 2 | Given merchant wants to create a request with header: Content-type: application/json X-TIMESTAMP: 2024-07-06T14:12:50+07:00 X-CLIENT-KEY: PaycloudSnap |
| 3 | X-SIGNATURE value for encryption will be: PaycloudSnap|2024-07-06T14:12:50+07:00 *same value as X-CLIENT-KEY + “|” + X-TIMESTAMP |
| 4 | By using merchant’s private key to encrypt the value with SHA256withRSA algorithm, merchant will generate fV5O/+eJPo8hrzZXG84YyEA9e7M6kUHAMAaTOG8s3n5nN2y7bJ55bV9Qmq9h6j0qXAEZVOja3iplIdwFtJ88PAl+psZGy3L0nfNWF3ZoTJzSLt71+/S1MuwyTSi7lirjHnd3t4kQx/F+6LDmyxjo4yeLcphWUFjPakvvjR2DU9A= |
Content-type : application/json
X-TIMESTAMP : 2025-07-06T14:12:50+07:00
X-SIGNATURE : fV5O/+eJPo8hrzZXG84YyEA9e7M6kUHAMAaTOG8s3n5nN2y7bJ55bV9Qmq9h6j0qXAEZVOja3iplIdwFtJ88PAl+psZGy3L0nfNWF3ZoTJzSLt71+/S1MuwyTSi7lirjHnd3t4kQx/F+6LDmyxjo4yeLcphWUFjPakvvjR2DU9A=
X-CLIENT-KEY : PaycloudSnap