Authentication
Only authenticated users can make API requests. Gini API uses the OAuth 2.0 protocol with bearer tokens for authentication from untrusted devices and a simplified authentication scheme for trusted devices/systems (backend or gateway) based on basic auth.
In order to use the API in your application, register your application with Gini. Afterwards, your application should request an access token from the Gini Authorization Server and use it to access Gini Pay API.
Security
Gini Pay API is only accessible over HTTPS. Make sure your application validates the relevant X.509 certificates, such as, common name matches hostname or issuing CA is trusted. Gini Pay API and User Center are accessible from legacy IPv4 and IPv6 networks. The protocol precedence depends on your operating system and configuration if both protocols are enabled.
//IPv6 compatibility example
$ host pay-api.gini.net
pay-api.gini.net has address 46.245.182.123
pay-api.gini.net has IPv6 address 2a00:14e0:600:1500:d0c5::7
$ host user.gini.net
user.gini.net has address 46.245.182.124
user.gini.net has IPv6 address 2a00:14e0:600:1500:d0c5::2