Environments
Each environment has its own identity host, API gateway and Partner Portal. Credentials do not carry across environments.
Hosts
| Sandbox | Production | |
|---|---|---|
| API base URL | https://gateway.sandbox.rynopay.io/api | https://prod.rynopay.io/api |
| Token endpoint | https://keycloak.sandbox.rynopay.io/realms/ryno/protocol/openid-connect/token | https://keycloak.rynopay.io/realms/ryno/protocol/openid-connect/token |
| Partner Portal | https://partners.sandbox.rynopay.io | https://partner.rynopay.io |
The token endpoint URL is also the exact aud value of your client assertion.
Authentication values
| Item | Value |
|---|---|
| Client authentication | private_key_jwt (RFC 7523) |
grant_type | client_credentials |
client_assertion_type | urn:ietf:params:oauth:client-assertion-type:jwt-bearer |
| Signing algorithm | RS256 |
| Key | RSA, 2048 bits or more |
Assertion iss and sub | Your client ID |
| Recommended assertion lifetime | 60 seconds |
| Access token lifetime | 300 seconds |
| Refresh tokens | None |
| Access token clock skew | 30 seconds |
Scopes
| Scope | Grants |
|---|---|
partner.read | Every GET route. Always included. |
partner.write | Every POST and PATCH route. Request it explicitly. |
See Scopes for entitlement profiles.