Quickstart
You need an approved partner account and a server that can make outbound HTTPS calls. Everything below uses sandbox.
Create a key and certificate
openssl req -x509 -newkey rsa:3072 -sha256 -days 730 -nodes \
-keyout ryno-partner.key -out ryno-partner.crt \
-subj "/CN=your-company-ryno-partner" \
-addext "basicConstraints=critical,CA:FALSE" \
-addext "keyUsage=critical,digitalSignature"
Keep ryno-partner.key secret. Certificate requirements
Register the certificate
In the Partner Portal, open API Credentials, paste ryno-partner.crt and choose Register certificate. When the status is Active, copy your Client ID. Details
Sign a client assertion
Sign an RS256 JWT with iss and sub set to your client ID, aud set to the token endpoint, a new jti, and a 60-second expiry. Details
Request an access token
curl -X POST https://keycloak.sandbox.rynopay.io/realms/ryno/protocol/openid-connect/token \
-d grant_type=client_credentials \
-d client_id=$RYNO_CLIENT_ID \
-d client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer \
-d client_assertion=$ASSERTION \
-d "scope=partner.read partner.write"
Call the API
curl https://gateway.sandbox.rynopay.io/api/partner/v1/business-profiles \
-H "Authorization: Bearer $ACCESS_TOKEN"