Integration Specifications
Base URL
Sandbox Base URL: https://sandbox.biz.juspay.in/
Production Base URL: https://{{hostname}}.biz.juspay.in/
Please note that the hostname on Production will differ basis the issuing bank that you are using. Please reach out to your JusBiz POC for receiving the correct hostname for your integration on Production.
Authentication
All the APIs use Basic HTTP authentication scheme to authenticate the requests and identify your account. API key can be generated from JusBiz Dashboard. API Key is used to authenticate the Server-to-Server API Calls.
API Key can be generated through JusBiz Dashboard. Navigate as per below instructions:
Login > Settings > API Settings > Create API Key
The API request expects a Basic Authorization header. The header value can be obtained by concatenating your API Key with a colon (:) and doing a base-64 encode on it
API Key is like password to your account. You must never send this information to browser or application clients. Do not publish your API Key in publicly accessible areas such as Git repositories, Android/iOS clients, support forums, etc.
Encryption
Juspay puts a lot of focus on the security of the application and the data of its clients. Therefore, all API calls responses will be encrypted by the public key of the client. This public key needs to be uploaded on the dashboard using the below navigation:
Login > Settings > API Settings > Upload New RSA
Upon successful upload, user will receive a key Id which needs to be passed in the headers of every API call.
Algorithm: JOSE Encryption with below details:
JWE Algorithm used is RSA OAEP 256
Encryption Method used is A256GCM
Response Parameters:
Response will be Encrypted as per the above algorithm within a key named encryptedResponse
Exceptions:
API Response will not be encrypted in case of 4XX and 5XX