1.1 General information about 1cs Mobile SDK Authentication
This document describes the First Cash Solution SDK authentication method and the corresponding parameters for the request and the responses passed back. If a merchant develops an app of its own, this method is necessary so that secure authentication takes place via the First Cash Solution interface, independently of the app. The authentication is based on a one-off token that is exchanged between First Cash Solution and the merchant.
If a parameter is mandatory, then it must be present
If a parameter is optional, then it can be present, but it is not required
If a parameter is conditional, then there is a conditional rule which specifies whether it is mandatory or optional
Notice: Please note that the names of parameters can be returned in upper or lower case.
2.2 Mobile SDK authentication process
High level process overview:
1. Mobile SDK creates authentication request to merchant’s URL endpoint
2. Merchant’s URL endpoint generates AuthToken and AuthLabel
3. Merchant’s URL endpoint calls First Cash Solution interface with below defined parameters
4. Merchant’s URL endpoint receives First Cash Solution response
5. Merchant’s URL endpoint responds to Mobile SDK authentication request
For the authentication request, the merchant’s endpoint should accept a POST request with Content-Type: application/json and a JSON body like this:
The Mobile SDK expects a JSON object as response from merchant’s endpoint, so merchant’s endpoint needs to create a JSON object with attributes from the response and also the generated AuthToken and AuthLabel like this:
In order to register a one-off token for encryption the 1cs Online Payment System, the merchant must transmit the following parameters to First Cash Solution via a server-to-server connection. Enter the following URL to do this:
Notice: For security reasons, the 1cs Online Payment System rejects all payment requests with formatting errors. Therefore please use the correct data type for each parameter.
The following table describes the encrypted payment request parameters:
MerchantID, assigned by First Cash Solution. Additionally this parameter has to be passed in plain language too.
Unique token generated by merchant which is used to decrypt the payment request
Identifier for the AuthToken used to decrypt the payment request
End time of token validity. The maximum period of validity amounts 24 hours. If the value is not specified the token expires after 15 minutes by default.
Parameters for authentication request
The following table shows the 1cs Online Payment System response parameters: pls. be prepared to receive additional parameters at any time and do not check the order of parameters
the key (e.g. MerchantId, RefNr) should not be checked case-sentive