Authentication
How to authenticate with the KOMOJU API
KOMOJU offers merchants two types of API keys: secret and publishable. These keys are necessary for making API requests, and you can find them in the settings page of your merchant account. Each merchant account will have a pair of keys for both live and test environments.
API requests are authenticated through HTTP Basic Authentication. To authenticate, use your API key as the username and leave the password field empty. For example:
curl -u secret_key: "https://komoju.com/api/v1/payments"
Secret Key
The secret key grants access to all API resources. It is crucial to store this key securely, as it has the potential to execute any action on your account. Make sure to keep your secret key on your server-side and never expose it to client-side applications.
Publishable Key
Unlike secret keys, publishable keys can interact with a limited selection of API resources. It is safe to expose your publishable key publicly, as it cannot cause any damage.
The following actions can be performed using the publishable key:
API Version
To ensure compatibility and maintain backward compatibility, KOMOJU API supports versioning through custom headers. You can specify the desired valid API version by including the X-KOMOJU-API-VERSION header in your requests, allowing integration with different versions of our service.
curl -H 'X-KOMOJU-API-VERSION: 2024-07-15' -u secret_key: "https://komoju.com/api/v1/payments"
You may also select and set an API version for your secret and publishable keys from the KOMOJU Dashboard. Go to the Merchant Settings menu and find the Edit button next to your key.
Updated 5 months ago