Media type of the resource, i.e. application/json.
X-TIMESTAMP
String
M
Client’s current local time in ISO-8601 format.
X-SIGNATURE
String
M
Created using symmetric signature HMAC_SHA512 algorithm.
Authorization
String
M
Represents access_token of a request; string starts with keyword “Bearer ” followed by access_token. Can get this token from Access Token B2B API response.
X-PARTNER-ID
String
M
Unique identifier for merchant. Provided by Midtrans.
X-EXTERNAL-ID
String
M
Alphanumeric string. We suggest merchant to use UUID format. Reference number that should be unique in the same day or 1 day idempotency key.
CHANNEL-ID
String
M
Mandatory field from Bank Indonesia that can take any value with correct format 5 digits numeric string.
Merchant ID (use the same value with merchantId in get-auth-code endpoint)
Merchant payment handle, merchant identifier in UUID format. Provided by Midtrans. Note: this value is not Midtrans Merchant ID, but a different value, here's the sample format: 303b4f89-xxxx-xxxx-xxxx-62a8ffaefaf3
The value on staging and production is different. Please make sure that you are sending the correct value based on the environment that you are using.
authCode
String(256)
M
Auth code to exchange with access token. Can get this code from Get Auth Code API response.
grantType
String (64)
M
Auth code grant type, possible value = AUTHORIZATION_CODE.