Create API secret

To access the Walley API, a valid token is required, which can be obtained using a client ID and API secret. The initial secret is generated within the Merchant Hub. However, additional secrets can be generated using the API.

Create the first secret in the Merchant Hub. After that, use this endpoint for the rest. An organization can hold two active secrets at a time.

The secret is shown once

The response is the only place you will ever see apiSecret. Store it somewhere safe before you close the response.

Example

Request
Response

POST /manage/organizations/{{orgId}}/apisecrets HTTP/1.1
Host: api.uat.walleydev.com // Test environment. Production uses a different hostname.
Content-Type: application/json
Authorization: Bearer {{accessToken}}

{
  "label": "Name of secret",
  "expirationDate": null
}

{
  "entityId": "83119b40-4a7d-454d-beda-26647f89e2fc",
  "metadata": {
    "clientId": "6a8efa5b-378b-44f5-bfc6-3b5d61f0d314",
    "apiSecret": "CR6qTkUAkKxwCWx7UwJgN7XX59sLzCwGdQu9TKyAbmWGBRWAkBd9NRBeFz2D",
    "expiresAt": "2020-01-01T00:00:00.0000000+00:00"
  }
}

Data Model

Request

Request path

Path	Required	Explanation
orgId	Yes	The id of the organization, to obtain the `orgId` please contact help@walley.se.

Request headers

Header	Required	Explanation
Authorization	Yes	See Authentication for how to generate the Bearer token value

Request body

Property	Required	Explanation	Type	Notes
label	No	Only a text that makes it easier to tell secrets apart.	string
expirationDate	No	A date between creation and 99 years in the future. The default is 6 months from creation.	date

Response

The response will be 201 Created for a successful creation.

Possible responses

Http status code	Description
201	Secret created
401	Unauthorized, token verification needed. See: Authentication for more information
403	No permission for this organization
422	Error code: TooManyAppPasswords, Not allowed to add 3 passwords. You can only add a maximum of 2 passwords.

Response body from 201 Created

Property	Explanation	Type
entityId	The id to identify the secret.	string
metadata.clientId	The client id is used in the authentication to retrieve a jwt token.	string
metadata.apiSecret	The api secret is used in the authentication to retrieve a jwt token.	string
metadata.expiresAt	The date the secret expires and cannot be used to retrieve any more jwt tokens.	string

Create API secret

Example​

Data Model​

Request​

Request path​

Request headers​

Request body​

Response​

Possible responses​

Response body from 201 Created​