Authentication - Emaal Virtual Accounts API

POST https://vas.finpaytech.co/business-api/api/v1/auth/login
Content-Type: application/json

{
  "email": "merchant@example.com",
  "password": "your-password"
}

{
  "accessToken": "<access-token>",
  "refreshToken": "<refresh-token>",
  "tokenType": "Bearer",
  "user": {
    "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
    "email": "merchant@example.com",
    "firstName": "Ada",
    "lastName": "Mwangi",
    "role": "PLAIN_MERCHANT",
    "merchantId": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "subMerchantId": null,
    "active": true
  }
}

Send accessToken on every later request:

Authorization: Bearer <access-token>

Merchant collection APIs require PLAIN_MERCHANT or SUPER_MERCHANT (list/read also allows MERCHANT_USER). Use Try it on Login in the API Reference tab.

Refresh

POST https://vas.finpaytech.co/business-api/api/v1/auth/refresh
Content-Type: application/json

{
  "refreshToken": "<refresh-token>"
}

The response shape matches login.

Logout

POST https://vas.finpaytech.co/business-api/api/v1/auth/logout
Content-Type: application/json

{
  "refreshToken": "<refresh-token>"
}

Returns 204.

Current User

GET https://vas.finpaytech.co/business-api/api/v1/auth/me
Authorization: Bearer <access-token>