Authentication

We use basic access authentication to authenticate merchants to the API. In the context of a HTTP transaction, basic access authentication is a method for a HTTP user agent to provide a API key when making a request.

Authentication can be set with CURLOPT_USERPWD when using cURL and ´Authorization: Basic INVOICE_API_KEY` header using other programming languages.

Security

The basic access mechanism provides no confidentiality protection for the transmitted credentials. They are merely encoded with Base64 in transit, but not encrypted or hashed in any way. Basic Authentication is, therefore, typically used over HTTPS. If invoice API key becomes compromised, simply delete and generate a new one in your BIPS account.

API Reference

Authentication

WebSocket

Partner API

Resources

Authentication