Skip to main content

PASS Pay by Bank

Overview​

Tip

To call protected endpoints, set your credentials with Authorize. Otherwise the runner adds placeholder Api-Key and Auth-Schema headers, without overwriting headers you have already set.

Runner​

Authentication​

Typical headers:

  • Api-Key: application key
  • Auth-Schema: authentication scheme (e.g. S2S)
  • (optional) X-Psu-IP-Address, X-Time-Zone

Quickstart​

  1. Go to the Runner section
  2. Select the environment (Sandbox / Production)
  3. Click Authorize and enter your real values (recommended)
  4. Try a call with Try it out

CORS/HTTPS notes​

Swagger UI makes the calls from the browser:

  • the API must allow CORS from the documentation portal domain
  • watch out for mixed content: if the portal is served over HTTPS, the API should be too