Developers

API Gateway, OAuth2, scopes and webhooks to integrate MYSOLEAS cleanly.

Create an application in Identity Cloud, get your client ID, store the secret server-side and call authorized services through the Gateway. The frontend must never call microservices directly or handle sensitive credentials.

Create an application View Gateway

OAuth2

A clear access model for internal and partner applications.

Identity Cloud exposes OAuth2 clients, redirect URIs, scopes, secrets and rotations. Secrets are visible only at creation or rotation, then remain server-side.

POST /oauth/login GET /api/oauth/clients POST /api/oauth/clients PATCH /api/oauth/clients/{id} POST /api/oauth/clients/{id}/secret/rotate DELETE /api/oauth/clients/{id}

Available scopes

Activate only what your application needs.

openid profile email kyc soleaspay:payments:create soleaspay:payments:read notifier:messages:send notifier:templates:read

Example call

Prepare your integrations server-side.

curl -X POST "$GATEWAY_BASE_URL/api/oauth/clients" \
  -H "X-SP-AUTH-TOKEN: Bearer <USER_JWT>" \
  -H "Content-Type: application/json" \
  -d '{"name":"Boutique MyShup","redirect_uris":["https://example.com/oauth/callback"],"scopes":["openid","profile","email"]}'