Authentication

1. Request User Authorization

To access the DailyPay Public REST API using OAuth 2.0, follow these initial steps:

Prerequisites & purpose:

The purpose of following the OAuth2 flow is to help you generate and retrieve an authorization_code that you can later use to get an access_token via the Request access token endpoint and start making more DailyPay Public REST API calls.

Before proceeding, DailyPay generates a set of client credentials that consist of the following parameters:

• client_id, secret, scope (provided by DailyPay)
• redirect_uri (provided by partner)

OAuth flow:

To initiate the OAuth2 authorization process, navigate to the /authorize endpoint below, and replace the {scope}, {client_id}, and {redirect_uri} parameters accordingly. Ensure that they match the values provided during client credential generation.

https://api.dailypay.com/oauth/authorize?response_type=code&scope={scope}&client_id={client_id}&redirect_uri={redirect_uri}

https://api.dailypay.com/oauth/authorize?response_type=code&scope=user%3aread_write&client_id=insertClientIdHere&redirect_uri=https://redirect_example.com

From there, you will be prompted to log in or create a new DailyPay account and Allow access to get your authorization_code. (See flow visual below)

What to do with the authorization_code:

Once you get the authorization_code, you can utilize it to request an access_token (see “2. Request a DailyPay Access Token” below).

This enables your application to make requests to the DailyPay Public REST API on behalf of a user. For example, to Get user details or Get a transfer account.

2. Request a DailyPay Access Token

Prerequisites

• Your code from the previous user authorization and consent in the section above.

Requesting an Access Token

As also specified in our [Request access token guide](Authentication#operation/requestOauthAccessToken), a request for an access token requires you to send the following parameters in the request body.

Example Request to the DailyPay OAuth Endpoint

curl --request POST \
    --url https://api.dailypayuat.com/authorization/oauth/token \
    --header 'accept: application/json' \
    --header 'authorization: Basic Q2xpZW50X1VkZ3NkZm...' \
    --header 'content-type: application/x-www-form-urlencoded' \
    --data "grant_type=authorization_code"
    --data "code=AUTHORIZATION_CODE"
    --data "redirect_uri=example.com"

Example 200 Response which contains an access

• Client credentials are preferred to access confidential information that a client agrees upon with DailyPay ahead of time.

Parameters

Example Client Credentials Request

curl --request POST \
    --url https://api.dailypayuat.com/authorization/oauth/token \
    --header 'accept: application/json' \
    --header 'authorization basic: Q2xpZW50X1VkZ3NkZm...' \
    --header 'content-type: application/x-www-form-urlencoded' \
    --data "grant_type=client_credentials"

Example 200 response with an access token

• This resulting access token can be used to make requests to the DailyPay Public REST API

{
    "access_token": "dpo_38347Ae178B4a16C7e42F292c6912E7710c8",
    "token_type": "bearer",
    "expires_in": 3600,
    "created_at": 1669741580
}