Authentication

Overview

The Authentication API allows you to obtain an access token (JWT) required for making authenticated requests to the IBAN API endpoints. The token is generated using your application credentials (app_id and app_secret).

Resource Access

• HTTP Method: GET
• Endpoint: /banking/iban/v2/token/get
• Authentication: Application credentials (app_id and app_secret)

Query Parameters

Parameter	Type	Required	Description
app_id	string	Yes	Your application ID
app_secret	string	Yes	Your application secret key

Request Headers

Header	Value	Required	Description
Accept	application/json	Yes	Content type for the response

Response

Success Response (200 OK)

{
  "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJQaW5nUG9uZyIsImV4cCI6MTc1NjkxMDIxOSwiYXBwX2lkIjoiODA1NzkxODg4NTUzMzEzIiwiY2x1IjoiY24ifQ.fUr4uq207XIm5xJv8XKXOPKbo7_6_La8LScOfeSt2ko",
  "expires_in": 3600,
  "token_type": "Bearer"
}

Response Fields

Field	Type	Description
token	string	JWT access token for API authentication
expires_in	integer	Token expiration time in seconds
token_type	string	Type of token (always "Bearer")

Error Responses

• 400 Bad Request: Missing or invalid app_id or app_secret
• 401 Unauthorized: Invalid credentials
• 500 Internal Server Error: Server error occurred

Code Examples

cURL

curl -X GET \
  'https://gateway.ahrvo.network/banking/iban/v2/token/get?app_id=805791888553313&app_secret=5D97E528854442B5B2543E65' \
  -H 'Accept: application/json'

Python

import requests

url = "https://gateway.ahrvo.network/banking/iban/v2/token/get"
params = {
    "app_id": "805791888553313",
    "app_secret": "5D97E528854442B5B2543E65"
}
headers = {
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
token_data = response.json()
print(f"Access Token: {token_data['token']}")

JavaScript (Node.js)

const axios = require('axios');

const url = 'https://gateway.ahrvo.network/banking/iban/v2/token/get';
const params = {
  app_id: '805791888553313',
  app_secret: '5D97E528854442B5B2543E65'
};
const headers = {
  'Accept': 'application/json'
};

axios.get(url, { params, headers })
  .then(response => {
    console.log('Access Token:', response.data.token);
  })
  .catch(error => {
    console.error('Error:', error.response.data);
  });

Usage Notes

• Store the access token securely and reuse it until it expires
• Tokens are valid for a limited time (typically 1 hour)
• Never expose your app_secret in client-side code
• Use the token as a Bearer token in the Authorization header for subsequent API calls
• Request a new token before the current one expires to maintain uninterrupted service

Token Usage Example

Once you have the token, use it in subsequent API requests:

curl -X POST \
  'https://gateway.ahrvo.network/banking/iban/api/account/v2/create' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{ ... }'

Interactive API Explorer