Getting Started with FIDO Server by Worldline
Prerequisites
You need to keep your client_id and secret_id that was sent to you by mail.
If you lost your secret_id, please contact us to generate a new one for you.
These credentials are needed for all interactions with the Fido Server by Worldline.
You also need the audience to access generate bearer tokens.
OAuth2 Server URL : https://access.fido.worldline-solutions.com
Audience : https://my-wafl-api-gateway-6glqflxv.ew.gateway.dev - to update
API access and authentication
The FIDO Server by Worldline (also called WAFL Server) API uses the OAuth Client Credentials Flow to authenticate API calls.
Request tokens
Example using curl
curl --request POST \
--url 'https://access.fido.dev.worldline-solutions.com/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic Base64Encode(concat('client_id', ':', 'client_secret'))' \
--data 'grant_type=client_credentials' \
--data 'audience=https://my-wafl-api-gateway-206w9c7e.ew.gateway.dev'
Parameters
- grant_type : set this to your "client_credentials"
- audience : the audiance for the token (see the prerequisites)
Response
If all goes well, you'll receive an HTTP 200 response with a payload containing access_token, and expires_in values:
{
"access_token": "eyJz93a...k4laUWw",
"expires_in": 3600
}
Access token lifetime
The lifetime of a token is set to 3600 seconds