Created using symmetric signature HMAC_SHA512 algorithm
Authorization
String
M
Represents access_token of a request; string starts with keyword “Bearer ” followed by access_token. Can get this token from Access Token B2B API response.
Authorization-Customer
String
M
Represents access_token of a request; string starts with keyword “Bearer ” followed by access_token from Binding API response
X-PARTNER-ID
String
M
Unique identifier for merchant. Merchant can send any value.
X-EXTERNAL-ID
String
M
Alphanumeric string. We suggest merchant to use UUID format. Reference number that should be unique in the same day or 1 day idempotency key.
X-DEVICE-ID
String
M
Device identification on which the API services is currently being accessed by the end user (customer)
CHANNEL-ID
String
M
Mandatory field from Bank Indonesia that can take any value with correct format 5 digits numeric string
Merchant ID (use the same value with merchantId in get-auth-code endpoint)
Merchant payment handle, merchant identifier in UUID format. Provided by Midtrans. Note: this value is not Midtrans Merchant ID, but a different value, here's the sample format: 303b4f89-xxxx-xxxx-xxxx-62a8ffaefaf3
The value on staging and production is different. Please make sure that you are sending the correct value based on the environment that you are using.
