Merchant Authentication

Process

• MERCHANT calls API to retrieve JWT Token. This token is shared across all Baokim B2B services (VA, QRPay/QRGlobal...).
• Token has a short expiration period — implement logic to automatically refresh when expired.

API Information

Method: POST

URL: /b2b/auth-service/api/oauth/get-token

Request

Request Parameters

#	Field Name	Data Type	Required	Description
1	merchant_code	String(50)	✅	Merchant code provided by Baokim
2	client_id	String(50)	✅	Merchant's Client ID provided by Baokim
3	client_secret	String(50)	✅	Merchant's Client Secret provided by Baokim

Request Example

{
  "merchant_code": "BAOKIMMRC",
  "client_id": "BAOKIMMRC",
  "client_secret": "iOiJKV1QiLCJhbGciOiJIUzI1NiJ9"
}

Response

Response Parameters

#	Field Name	Data Type	Required	Description
1	code	Number(3)	✅	Baokim error code
2	message	String(200)	✅	Baokim error message
3	data	Object	✅	Response data from Baokim

Data Information

#	Field Name	Data Type	Required	Description
1	access_token	String	✅	JWT Token string
2	token_type	String	✅	Token type
3	expires_at	DateTime	✅	Token expiration time

Response Example

{
  "code": 100,
  "message": "Successfully",
  "data": {
    "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjkyOTIvYXBpL2IyYl9hdXRoL2xvZ2luIiwiaWF0IjoxNzA2MDgwODU1...",
    "token_type": "bearer",
    "expires_at": "2026-06-30 14:41:00"
  }
}

Error Codes

Error Code	Description
100	Successfully
11	Failed
101	Baokim system error
103	Signature verification error
104	JWT authentication error
422	Invalid data (wrong format, missing required fields)