🔵API Keys Management

To ensure secure communication between your website and CoinbarPay's payment gateway, our system relies on API keys to authenticate and authorize requests. In this section, we will discuss the importance of managing your API keys properly, as well as the steps for generating and using the required keys.

API KEYS

SERVICE_CLIENT_ID : Payment Gateway Key

The SERVICE_CLIENT_ID serves as the primary identifier for your CoinbarPay Service.

This ID is used for identification to requests made between your website and our payment gateway.

SERVICE_SECRET_KEY : Authentication Secret Key

The SERVICE_SECRET_KEY serves as HMAC (Hash-based Message Authentication Code) secret key to sign and authenticate requests to CoinbarPay API Server.

Warning

This KEY should never been exposed, transfered, sent to anyone outside your company or is not allowed to manage transactions requests.

Security hints

To maintain the highest level of security and protect your CoinbarPay account from unauthorized access or malicious activities, follow these best practices for API key management:

1. Secure Storage: Keep your KEYS and other API keys in a secure and encrypted location, such as environment variables or a secure database, to prevent unauthorized access or exposure.

2. Limit Access: Grant KEYS access only to the required services and personnel who directly manage your integration with CoinbarPay.