Merchant Authentication

Process

Merchant calls the API to obtain a JWT Token.

API Information

Method: POST

URL: /b2b/auth-service/api/oauth/get-token

Request

(Parameters sent by merchant)

Main Parameters

No	Field Name	Data Type	Required	Description
1	merchant_code	String(50)	✅	Merchant code provided by Baokim
2	client_id	String(50)	✅	Client ID provided by Baokim
3	client_secret	String(50)	✅	Client secret provided by Baokim

Request Example

{
  "merchant_code": "BAOKIMMRC",
  "client_id": "BAOKIMMRC",
  "client_secret": "iOiJKV1QiLCJhbGciOiJIUzI1NiJ9"
}

Response

Main Parameters

No	Field Name	Data Type	Required	Description
1	code	Number(3)	✅	Baokim error code
2	message	String(200)	✅	Baokim error message
3	data	Object	✅	Data returned by Baokim

Data Information

No	Field Name	Data Type	Required	Description
1	access_token	String	✅	JWT Token string
2	token_type	String	✅	Token type
3	expired_at	DateTime	✅	Token expiration time

Response Example

{
  "code": 100,
  "message": "Successfully",
  "data": {
    "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjkyOTIvYXBpL2IyYl9hdXRoL2xvZ2luIiwiaWF0IjoxNzA2MDgwODU1LCJleHAiOjE3MDYwODQ0NTUsIm5iZiI6MTcwNjA4MDg1NSwianRpIjoiV0FUWnpJZTB3d0NuU1dpNSIsInN1YiI6IjEiLCJwcnYiOiIyM2JkNWM4OTQ5ZjYwMGFkYjM5ZTcwMWM0MDA4NzJkYjdhNTk3NmY3IiwibWVyY2hhbnRfaW5mbyI6eyJjb2RlIjoiYWJjIn0sInNjb3BlcyI6W3siYWN0aW9uIjoiR0VUIiwidXJpIjoiYWJjLmNvbSJ9LHsiYWN0aW9uIjoiUE9TVCIsInVyaSI6Inh5ei5jb20ifV19.aRfdvwFz8CDiBqHoCG8IGfPC0bO4vhXRvY76dupRx9k.",
    "token_type": "bearer",
    "expired_at": "2025-10-30 14:41:00"
  }
}

Error Codes

Error Code	Description
100	Success
11	Failed
101	Baokim system error
103	Signature authentication error
104	JWT authentication error
422	Invalid data
710	Sub merchant does not exist
711	Master merchant does not exist
712	Sub merchant is inactive
713	Master merchant is inactive