Authentication Token

Before you can call any API endpoint, you must first acquire an OAuth 2 authorization token. This is done by calling the following POST endpoint:

Request

POST https://tokoapi-dev.netzme.com/public/api/ppob/v1/get-token

Headers

Name	Value
Content-Type	application/json
X-SIGNATURE	See Signature token page
X-CLIENT-ID	Partners ClientId, eg Xersia01
X-TIMESTAMP	Epoch time
X-MSG-ID	Random ID (eg: UUID)

Name	Type	Description
requestId	String	value must same with X-MSG-ID
requestTime	Long	value must same with X-TIMESTAMP
type	String	TYPE_GENERATE_TOKEN
body	JSON Object	Body Object

Body

Name	Type	Description
merchantId	String	your MerchantID, eg: M_YDXabcd1
webview	Boolean	To show url or openAPI
additionalInfo	String	leave as empty string for now

Response

Response - OpenAPI

{
    "requestId": "ed3f6763-b1bd-40e3-aecb-ddaa2c3a9775",
    "type": "TYPE_GENERATE_TOKEN",
    "status": 100,
    "statusMessage": "SUCCESS",
    "body": {
        "expiredToken": 1709721773949,
        "token": "eyJzaWduYXR1cmUiOiIwZGEwYmQ1MWU0MjI2Mzc4YWZhMTliYTM5MDRlZjg5NzQxNWY4ODgzZWI0YjI5ZDM5NzM4YTllZjE2OWIxYzc3IiwidG9rZW5QcG9iVXNlclJlc3BvbnNlIjp7InVzZXJJZCI6InJhaHlhbi1jbGllbnQiLCJleHBpcmVkVHMiOjE3MDk3MjE3NzM5NDksInJvbGVzIjpbInBwb2IuZ2FtZV90b3B1cF9pbl9nYW1lIl19fQ%3D%3D"
    }
}

Response - WebView

{
    "requestId": "ad3f6764-b1bd-40e3-aecb-ddaa2c3a9776",
    "type": "TYPE_GENERATE_TOKEN",
    "status": 100,
    "statusMessage": "SUCCESS",
    "body": {
        "expiredToken": 1709721773949,
        "token": "eyJzaWduYXR1cmUiOiIwZGEwYmQ1MWU0MjI2Mzc4YWZhMTliYTM5MDRlZjg5NzQxNWY4ODgzZWI0YjI5ZDM5NzM4YTllZjE2OWIxYzc3IiwidG9rZW5QcG9iVXNlclJlc3BvbnNlIjp7InVzZXJJZCI6InJhaHlhbi1jbGllbnQiLCJleHBpcmVkVHMiOjE3MDk3MjE3NzM5NDksInJvbGVzIjpbInBwb2IuZ2FtZV90b3B1cF9pbl9nYW1lIl19fQ%3D%3D",
        "webviewUrl": "https://toko-web-vgame-dev.netzme.com",
        "webviewUrlWithQueryParam": "https://toko-web-vgame-dev.netzme.com/game-top-up?token=eyJzaWduYXR1cmUiOiIwZGEwYmQ1MWU0MjI2Mzc4YWZhMTliYTM5MDRlZjg5NzQxNWY4ODgzZWI0YjI5ZDM5NzM4YTllZjE2OWIxYzc3IiwidG9rZW5QcG9iVXNlclJlc3BvbnNlIjp7InVzZXJJZCI6InJhaHlhbi1jbGllbnQiLCJleHBpcmVkVHMiOjE3MDk3MjE3NzM5NDksInJvbGVzIjpbInBwb2IuZ2FtZV90b3B1cF9pbl9nYW1lIl19fQ%3D%3D&merchantId=M_vz7jZK8F"
    }
}

Response - Invalid Body Request

{
    "requestId": "ed3f6763-b1bd-40e3-aecb-ddaa2c3a9775",
    "type": "TYPE_GENERATE_TOKEN",
    "status": 100,
    "statusMessage": "INVALID_BODY_REQUEST",
    "body": null
}

Curl Request Sample

curl --location 'https://tokoapi-dev.netzme.com/public/api/ppob/v1/get-token' \
--header 'Content-Type: application/json' \
--header 'X-CLIENT-ID: Xersia01' \
--header 'X-SIGNATURE: QFytIxwmxrpILMQv9Qludv/U9jAKET3RHvHvTHh+65nMVjaav4z66R246TTleiySh970R6xwahpMs6QlbuGbg5BlvPjCyvIod8s7xXVVXsLxTaasw98w3Ujo3LV9DEaitNJ3AYl3ctbhqgStLf1bzYnxX431IG3PZBk0gXqejjVxWyoLLJaRHSz2+hw1jhQ6JJUXZpI3KUkcmZC/OH7snEzQn3aXJE8bLv2D2TpEI7A7zT2voaedbCmmAFVC8pRM+nCfbVIOHrZukEezG+1wSpD8ole+/psnCyYd7kullocPHWTZDz9SH7J7bKXF3V3LM6Iu7ljkFW+au0hk0+Owow==' \
--header 'X-TIMESTAMP: 1867413352207' \
--header 'X-MSG-ID: ed3f6763-b1bd-40e3-aecb-ddaa2c3a9774' \
--data '{
    "requestId": "ed3f6763-b1bd-40e3-aecb-ddaa2c3a9774",
    "requestTime": 1867413352207,
    "type": "TYPE_GENERATE_TOKEN",
    "body": {
        "merchantId": "M_YDXabcd1",
        "webview": true,
        "additionalInfo": ""
    }
}'