Integrating Payment Bridge API

Hi,
I’m starting a new project and I’d like to use the Payment Bridge API in order to make payments and refunds from a web application; the web application is hosted on an external server and it is used by an operator on his own PC.
Is it possibile to send sale/refund messages from an external web application?
Thank you

Hi,
Yes it is possible to send sale/refund messages from external server, you need to make sure the callback url is publicly reachable to receive the payment response
https://poynt.github.io/developer/semi/integrating-payment-bridge-api.html

Thank you!
I’ve started to develop some code for testing.

First of all, i’ve created a new App, i’ve dowloaded the keypair file and i’ve enabled all cloud permissions.
In my code I create a JWT in order to get the access token. Everything seems to work fine.

Nexi has some developer terminals; one of these is in my office and I’d like to send to it a “sale maessage”.
I’ve got the terminal data:
StoreID Nexi Shop
BusinessID Nexi Shop
DeviceID urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8

The messagge I sent to the url https://services.poynt.net is like this one:

{“ttl”:30,“businessId”:“Nexi Shop”,“storeId”:“Nexi Shop”,“deviceId”:“urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8”,“data”:"{“callbackUrl”:"",“payment”:"{\“amount\”:12,\“currency\”:\“EUR\”,\“referenceId\”:\“1234567890\”,\“authzOnly\”:false,\“cashOnly\”:false,\“creditOnly\”:false,\“debitOnly\”:false,\“disableCash\”:false,\“disableChangeAmount\”:false,\“disableCheck\”:false,\“disableDebit\”:false,\“disableEMVCL\”:false,\“disableEMVCT\”:false,\“disableManual\”:false,\“disableMSR\”:false,\“disableOther\”:false,\“disablePaymentOptions\”:false,\“disableTip\”:false,\“manualEntry\”:false,\“multiTender\”:false,\“nonReferencedCredit\”:false,\“offlineAuth\”:false,\“readCardDataOnly\”:false,\“skipPaymentConfirmationScreen\”:false,\“skipReceiptScreen\”:false,\“skipSignatureScreen\”:false,\“cashbackAmount\”:0,\“tipAmount\”:0,\“notes\”:\"\",\“offlineApprovalCode\”:\"\",\“orderId\”:\"\"}"}"}

I’ve got a HTTP error 400: what does it mean?
How can I enable my Poynt user to send requests to the terminal?

Thank you in advance
sirio

@deepak any feedback from your side?

Could you please share the response message and request-Id for the request.

A few things to note here

Hi,
I repeated the creation proc on eu sites.
I’ve created a new merchant in the mc console; where can i get the business id and then the store id?
thanks

The URL of the store has the business and store Id
/merchants/{businessId}/stores/{storeId}

Just posting here latest thread update from Sirio:

"Hi Dennis,
I’m starting a new project and I’d like to use the Payment Bridge API in order to make payments and refunds from a web application.
I’ve started to develop some code for testing.
First of all, i’ve created a new App, i’ve dowloaded the keypair file and i’ve enabled all cloud permissions (at the end of my test I’ll wonder which permission is mandatory for our purposes).
In my code I create a JWT in order to get the access token. Everything seems to work fine.
Nexi has some developer terminals; one of these is in my office and I’d like to send to it a “sale message”.
I’ve got the terminal data:
StoreID Nexi Shop
BusinessID Nexi Shop
DeviceID urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8
The messagge I sent to the url https://services.poynt.net is like this one:
{“ttl”:30,“businessId”:“Nexi Shop”,“storeId”:“Nexi Shop”,“deviceId”:“urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8”,“data”:"{“callbackUrl”:"",“payment”:"{\“amount\”:12,\“currency\”:\“EUR\”,\“referenceId\”:\“1234567890\”,\“authzOnly\”:false,\“cashOnly\”:false,\“creditOnly\”:false,\“debitOnly\”:false,\“disableCash\”:false,\“disableChangeAmount\”:false,\“disableCheck\”:false,\“disableDebit\”:false,\“disableEMVCL\”:false,\“disableEMVCT\”:false,\“disableManual\”:false,\“disableMSR\”:false,\“disableOther\”:false,\“disablePaymentOptions\”:false,\“disableTip\”:false,\“manualEntry\”:false,\“multiTender\”:false,\“nonReferencedCredit\”:false,\“offlineAuth\”:false,\“readCardDataOnly\”:false,\“skipPaymentConfirmationScreen\”:false,\“skipReceiptScreen\”:false,\“skipSignatureScreen\”:false,\“cashbackAmount\”:0,\“tipAmount\”:0,\“notes\”:\"\",\“offlineApprovalCode\”:\"\",\“orderId\”:\"\"}"}"}
I’ve got a HTTP error 400: what does it mean?
How can I enable my Poynt user to send requests to this terminal?
Thank you in advance
sirio"

@dennis, @deepak, do you think the 400 error might be an authentication problem due to the profiles of the Nexi Shop test merchant?

Sirio’s Serial Number is: P6SW396JS028636

Hi Flavio & Sirio,
There could be two possible reasons for the error,

  1. The URL you are using is for US region, please use https://services-eu.poynt.net for developing apps for EU region
  2. The business needs to authorize the app to access resources, refer to point 9 & 10 in the link https://poynt.github.io/developer/cloud/integrating-with-poynt-cloud-apis.html

If you still have issues please post the request ID for the request that you have made

Hi,
we have checked all the ids and my application should have all necessary permissions, but I still receive http response code 400.

Below i put all the data used for the test:

Signed JWT: eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImF1ZCI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJpc3MiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImV4cCI6MTU1OTU3NjgxNywiaWF0IjoxNTU5NTc2NDU3LCJqdGkiOiI4ZjEzNjBmOS0zNmEwLTRhZTYtOWI0MC03MTBhNGIwMjBhMmQifQ.CmHU4P76dTscNRgYcT4Nh5WJcZjvpeABcyAFmxFimqlge7xvnVJBtqfTVZFnB8RbbcYtqm3kIdAU3I_RiaLWbiHy0k5u3XQlN5ttuA79jKW0rokMB-flDHMqPy2g8c_Ov3rc0QNryhDEznl13BDflMdzOLUvbT53HK9NzdldldVkzP5oVv1R7beVO7x5OCPVjK6mqzRmMiJm15uVQd6O08qmxxGfT4Skgu4LfOM8-PSWTHoumhNVK1HMvJpwdpts4I1KFm_z5LFAPr8AevIj8Veywk01qAv9ccB1Y-T3qlpSV4_uV4lp36cUj7ydXwEmdAvtVttMjoZjq4dn0ng7Qw
AccessToken=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInN1YiI6InVybjphaWQ6ZjE4ZThkZWYtNGNiYy00NTA0LThjZWItNzhkODI5MDg5YjE0IiwicG95bnQuc2N0IjoiSiIsInBveW50Lm9yZyI6IjBlNmY3ODg2LTA5NTYtNDQwNS1iYzQ4LWMxOTg2OGQ3ZWUyMiIsImlzcyI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJwb3ludC5raWQiOjYxNTUyNDYxNTI4MjcxNDE3NzcsInBveW50LmF0eSI6IlMiLCJleHAiOjE1NTk2NjI4NTcsImlhdCI6MTU1OTU3NjQ1NywianRpIjoiYTRiMmRiZmEtNWMzMS00NzgxLWE1YjEtYmJhMmRlYzZhYWY2In0.ZPnZPmW3bRYI0CTSdDW8zEnuiXXU1hFzQFIGde-Y3fgEy2QncDTCN-n3kKVPbnZtyTBWmqNbu6W7sLFvj5KQRXv1bSPdpl_hH586Sj80x_-kkM4h1f2BKcvi0xXCCpGOirx0-aW44qhqIpZNbI3n7-pFDBwUjECl2-Li-XgDJ9DbHKGYjU-aR-nWJyYORe7lACHB2Jr5Jy5jeRPJOLaSUSeWcSb2_nSPP0RHMiZn-MXmEvvQbq1OwDcUz7E12RA4zIvUlCfGank8b9BwI8hLnIdhlsNPV9KQsVxhvgA_KVv8jOO2o2acGzadT5W3jWf8-Ou9sCMXUQfYMhqMMg_BQA
RefreshToken=1:2:1:2:QmcCSexz9mUFNBVAeOpsvcSvuPAT9AkqlWCoJg7sr5997PPQvX/ARe3pcWo5vYCLCUKuUOQUKtwhIoCSCWC6c/e0emOWTb8m0VAelKXgDSA=
URL: https://services-eu.poynt.net/cloudMessages
DATI: {“ttl”:30,“businessId”:“urn:bid:7b6da1a7-9935-40bd-885f-19a45bc89fe5”,“storeId”:“urn:sid:75b2cf9d-3c8b-4bcc-acf2-7c14a7da4a4b”,“deviceId”:“urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8”,“data”:"{“callbackUrl”:"",“payment”:"{\“amount\”:12,\“currency\”:\“EUR\”,\“referenceId\”:\“1234567890\”,\“authzOnly\”:false,\“cashOnly\”:false,\“creditOnly\”:false,\“debitOnly\”:false,\“disableCash\”:false,\“disableChangeAmount\”:false,\“disableCheck\”:false,\“disableDebit\”:false,\“disableEMVCL\”:false,\“disableEMVCT\”:false,\“disableManual\”:false,\“disableMSR\”:false,\“disableOther\”:false,\“disablePaymentOptions\”:false,\“disableTip\”:false,\“manualEntry\”:false,\“multiTender\”:false,\“nonReferencedCredit\”:false,\“offlineAuth\”:false,\“readCardDataOnly\”:false,\“skipPaymentConfirmationScreen\”:false,\“skipReceiptScreen\”:false,\“skipSignatureScreen\”:false,\“cashbackAmount\”:0,\“tipAmount\”:0,\“notes\”:\"\",\“offlineApprovalCode\”:\"\",\“orderId\”:\"\"}"}"}
Failed : HTTP error code : 400

“businessId”:“urn:bid:7b6da1a7-9935-40bd-885f-19a45bc89fe5”,
“storeId”:“urn:sid:75b2cf9d-3c8b-4bcc-acf2-7c14a7da4a4b”,

The business Id and store Id do not start with “urn:bid” and “urn:sid”.
It should be
“businessId”:“7b6da1a7-9935-40bd-885f-19a45bc89fe5”,
“storeId”:“75b2cf9d-3c8b-4bcc-acf2-7c14a7da4a4b”,

Hi,
i’ve made the changes, but now I get HTTP 401 code.

My application id has full cloud permissions. I need to make call to cloud API from a server application without user interface.
I’d like to know if 10-14 steps listed in https://poynt.github.io/developer/cloud/integrating-with-poynt-cloud-apis.html#authorize-merchant should be executed everytime my server need to call cloud API, ora just once.
Anyway is it possible to skip these steps? I have no web application to be called back!

Thank you
sirio

Here is the full dump messages:

Signed JWT: eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImF1ZCI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJpc3MiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImV4cCI6MTU1OTY0Mjg2MiwiaWF0IjoxNTU5NjQyNTAyLCJqdGkiOiI1YTQwMGFiNC0xZWY2LTRiMDUtYWI1ZS00ZDhiMDhlMjliZTgifQ.eZgaDxxRI0HKqKvlKOyWLCB6NNTrw4XkcbRTviOVL-7wMs6qCctLBqQGw4XU6XsPfoyzVfGFIoxSHlj6B6-IEwCjZYVxt6lx90kj8cEJr1FyYlS4aEW4K3xpe_z6BW3SVNAT-eNE3cMLlNfp-U456qomcXZjZ1q-j45wpYiySrfzjizZYL36-1Hjtb9UhLTenhkjphLRwpsC4F1bxg1dfE7gm0gr48hz0Z-L76OwtuaRTKxU382R1cHB6DW_ETy2PAkNGwpw-o4JdAPzclh4p7pbg3QSrrnK5VBiG6ciOWK73XRIQaozHIdp186oDgOF__lQuysCTJVhcqzDecldZA
AccessToken=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInN1YiI6InVybjphaWQ6ZjE4ZThkZWYtNGNiYy00NTA0LThjZWItNzhkODI5MDg5YjE0IiwicG95bnQuc2N0IjoiSiIsInBveW50Lm9yZyI6IjBlNmY3ODg2LTA5NTYtNDQwNS1iYzQ4LWMxOTg2OGQ3ZWUyMiIsImlzcyI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJwb3ludC5raWQiOjYxNTUyNDYxNTI4MjcxNDE3NzcsInBveW50LmF0eSI6IlMiLCJleHAiOjE1NTk3Mjg5MDMsImlhdCI6MTU1OTY0MjUwMywianRpIjoiY2UyNzU2ZDktNTAwNC00MjFhLTlkYTktMGI1NDIxN2UzZDMzIn0.f6Z6a2ecEp3UKVE34-eMWQElTc20-UDxBpO-0Xn61rTDW1JRMAHNpg5SJoSyxe2WvMrKZ-vrDRLVC16tw2JY1cOEt6gf34xoN5PJmea2q7B1T3iMEtCZmGYEL57kMnMSBh7S2BCyuk6AFjYhYNMk9AHm-_Bx6PRgF5WZBD8KJh0OEYbKRZPfboOBIR8LbV6ISOeA-6Y3VIjTkXA1op4SU5_y5Ehb2ScNLwJ0ryOy78JKxZWQ7F8PrPtXpIJj0cscScwRSRG5rPZD9Me2rHULyFlysAPLk6tWRSdpNt9LoHGjohnilhJFVjvNYmoTRuJ0qcXpapeA_VTqXwA7XKyvQw
RefreshToken=1:2:1:2:p8b+QrojBaQxlblnNAYpAYsXhi2NLxxHXbqcn+liYYEyKgM7B5IyrDavPUoA6hGXb3pw2YtpD1Tlgu6rIIqPOXww2ikvcf2LoRMy6hfWOJQ=
URL: https://services-eu.poynt.net/cloudMessages
DATI: {“ttl”:30,“businessId”:“7b6da1a7-9935-40bd-885f-19a45bc89fe5”,“storeId”:“75b2cf9d-3c8b-4bcc-acf2-7c14a7da4a4b”,“deviceId”:“urn:tid:74376cb8-7cd8-30a9-97d7-94598e947dc8”,“data”:"{“callbackUrl”:"",“payment”:"{\“amount\”:12,\“currency\”:\“EUR\”,\“referenceId\”:\“1234567890\”,\“authzOnly\”:false,\“cashOnly\”:false,\“creditOnly\”:false,\“debitOnly\”:false,\“disableCash\”:false,\“disableChangeAmount\”:false,\“disableCheck\”:false,\“disableDebit\”:false,\“disableEMVCL\”:false,\“disableEMVCT\”:false,\“disableManual\”:false,\“disableMSR\”:false,\“disableOther\”:false,\“disablePaymentOptions\”:false,\“disableTip\”:false,\“manualEntry\”:false,\“multiTender\”:false,\“nonReferencedCredit\”:false,\“offlineAuth\”:false,\“readCardDataOnly\”:false,\“skipPaymentConfirmationScreen\”:false,\“skipReceiptScreen\”:false,\“skipSignatureScreen\”:false,\“cashbackAmount\”:0,\“tipAmount\”:0,\“notes\”:\"\",\“offlineApprovalCode\”:\"\",\“orderId\”:\"\"}"}"}
Failed : HTTP error code : 401

Hi,
please read also my previous post because there are some pending issues.

I’ve tried to follow steps 10 to 14… I’ve created a jsp page exposed by an https server (https://www.e.pisa.it/ServerCIG/testPoynt.jsp). I put this address in the OAuth Callback Url field in my app configuration. Then I copy the Merchant login URL in my browser; I was asked to login and I’ve done it successfully. When I’ve chosen my merchant, I got an error:

An error occurred: “Invalid callback URL.”

what does it mean?

Thank you
sirio

Hi,
i changed the callbackurl to another site and auth process went on.

Now the POST request i’ve made with curl return me:
{“code”:“INVALID_ACCESS_TOKEN”,“httpStatus”:401,“message”:“Access token is missing or invalid.”,“developerMessage”:“Invalid authorization header: Bearer eyJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImF1ZCI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJpc3MiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsImV4cCI6MTU1OTY1MjAyOCwiaWF0IjoxNTU5NjUxNjY4LCJqdGkiOiI5N2I1MWExYy04NjBmLTQ3OTItOWVkMi0xZDk5MzA0OWRkNzcifQ.uAljwogJXlJGi5xbaY7CH28ZozZj7MV7EF1azSw5L7BRcCxn3OyKw099UX7nYJOob4WuPH28vjKpZJItVe3MMkGWuy1GVeXsJyVdLa3Iaf_80VYSccZlOSceFTt_Q1x5PDDhzKs6Gz4mRVtbnP2nul4komYLKgQ5RML8axa5luNGPkiIqEl7NaUHLvgqrggoHBpYRz1_rOtGIArc0SFPTQ7t65rDqJGkqnSMPwofvI9B5B8qmSj798HUnYuYqOSwpGVlRRTx1OZpu2yTSHMPMddyWX6J8R20IhlkOpOHZhx8DhXwu57Jm_kf7QZ3m3vMyz9COmWAn1rpW3BDn7acxA”,“requestId”:“d96e25e4-55a8-4abc-8f89-d99c11502680”}

I got the selfsigned jwt with my java code: the signing key is correct (trying chaning it i’ve got an error) and the claim seems to be right:

{“sub”:“urn:aid:f18e8def-4cbc-4504-8ceb-78d829089b14”,“aud”:“https://services-eu.poynt.net”,“iss”:“urn:aid:f18e8def-4cbc-4504-8ceb-78d829089b14”,“exp”:1559652654,“iat”:1559652294,“jti”:“3b19ee5a-93e2-4d4a-a0af-87a182f5c126”}

how can I solve the problem?

thank you
sirio

The access token expires every 24 hours, request for a new access token again

Hi,
I think that the problem is not the expiration time.

At 10:53 I browsed https://eu.poynt.net/applications/authorize?client_id=urn:aid:f18e8def-4cbc-4504-8ceb-78d829089b14&redirect_uri=https%3A%2F%2Fetnaonline.comune.catania.gov.it%2Fetnaonline-ServerCIG%2FtestPoynt.jsp; i’ve made login with my credentials and i get the following
businessId:9d321a6f-d869-4f1b-9460-914267399ed9
status:success
code:eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2V1LnBveW50Lm5ldCIsImlhdCI6MTU1OTg5NzYyMiwiZXhwIjoxNTU5ODk4NTIyLCJzdWIiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInBveW50LmJpeiI6IjlkMzIxYTZmLWQ4NjktNGYxYi05NDYwLTkxNDI2NzM5OWVkOSIsInBveW50LnVpZCI6MTcyMDgxMX0.TEdorZr_HdqhjzIxUzWQcoz-NYIMfoOQj-kQF-ell3OgIWHjH1Dl9ADnICjETk_j6EHeG9C4zIgzCoRt0MuFMmhGXXTfvt7j5uRJ1slvSLKyYRXVplu3m_0aG8YFmBjwyM9ngM5FGwXUiMSYY9jOxNN5Xs0vzrM1I1BmXHqnH9YD0_aAgtNr9RTNFCqf0KgOn9cxDYw3iPyj6uzBEr6YJ31fpApilDRxfzzxt3to_GpGgMek0Eb5KiE5ZxfvROvWCtaR5nP-Lnpk06cY_UQEZm5Y-A4Nl1wSNevzeJo62o1zU2X5RIYYBStqjR5MlYaSzkkU6HGtUhIYdbWw9k8Z9g

At 10:55 I send the following self signed claim
{“sub”:“urn:aid:f18e8def-4cbc-4504-8ceb-78d829089b14”,“aud”:“https://services-eu.poynt.net”,“iss”:“urn:aid:f18e8def-4cbc-4504-8ceb-78d829089b14”,“exp”:1559901349,“iat”:1559897749,“jti”:“84086e52-c42b-41ac-b60d-3f1eba8b04ce”}
And I got back this AccessToken
eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInN1YiI6InVybjphaWQ6ZjE4ZThkZWYtNGNiYy00NTA0LThjZWItNzhkODI5MDg5YjE0IiwicG95bnQuc2N0IjoiSiIsInBveW50Lm9yZyI6IjBlNmY3ODg2LTA5NTYtNDQwNS1iYzQ4LWMxOTg2OGQ3ZWUyMiIsImlzcyI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJwb3ludC5raWQiOjYxNTUyNDYxNTI4MjcxNDE3NzcsInBveW50LmF0eSI6IlMiLCJleHAiOjE1NTk5ODQxNTAsImlhdCI6MTU1OTg5Nzc1MCwianRpIjoiNWNmMWE3NjMtZjgwMC00MzA5LTk0N2MtNzViNGQ4MTMxZDFlIn0.2ty5TjM4H27cfjhvRmruISCiz8X4Fy5MlxAmcyi_NlVmZVlOvX66OsCenwR1k1tdrFm0qCS7LhSp4UFHoGOwEdQVHVXHOO7kEBjLrEPAwomh93K0iqrdYtX-pS8nhGdeGf0aH_9OTfr-v2bHihlaVsqG5865N33E3Xaahtqyy02uIg8rsJQbKIytC7cpWPTBm4-M1Lja64JiJG5cZP1mstOr7FhAGuSyBodsYoPXOT_1P8lI59BJ7pGVIHaXfSn0IH7PGUBEco25-i0Yi5irvM6HX7X-23wRNppnK8fhMG3toKM0X3W5-qBey_4qrPvLMxVxmdwy6y1lPkLSlmz5Ig

At 10:57 I’ve executed the following CURL:
curl -XPOST “https://services-eu.poynt.net/token” -k --proxy-user “bassilichi.it\sircandini:Welcome2019_1” --proxy “proxy.bassilichi.it:9090” -H “Accept: application/json” -H “Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInN1YiI6InVybjphaWQ6ZjE4ZThkZWYtNGNiYy00NTA0LThjZWItNzhkODI5MDg5YjE0IiwicG95bnQuc2N0IjoiSiIsInBveW50Lm9yZyI6IjBlNmY3ODg2LTA5NTYtNDQwNS1iYzQ4LWMxOTg2OGQ3ZWUyMiIsImlzcyI6Imh0dHBzOlwvXC9zZXJ2aWNlcy1ldS5wb3ludC5uZXQiLCJwb3ludC5raWQiOjYxNTUyNDYxNTI4MjcxNDE3NzcsInBveW50LmF0eSI6IlMiLCJleHAiOjE1NTk5ODQxNTAsImlhdCI6MTU1OTg5Nzc1MCwianRpIjoiNWNmMWE3NjMtZjgwMC00MzA5LTk0N2MtNzViNGQ4MTMxZDFlIn0.2ty5TjM4H27cfjhvRmruISCiz8X4Fy5MlxAmcyi_NlVmZVlOvX66OsCenwR1k1tdrFm0qCS7LhSp4UFHoGOwEdQVHVXHOO7kEBjLrEPAwomh93K0iqrdYtX-pS8nhGdeGf0aH_9OTfr-v2bHihlaVsqG5865N33E3Xaahtqyy02uIg8rsJQbKIytC7cpWPTBm4-M1Lja64JiJG5cZP1mstOr7FhAGuSyBodsYoPXOT_1P8lI59BJ7pGVIHaXfSn0IH7PGUBEco25-i0Yi5irvM6HX7X-23wRNppnK8fhMG3toKM0X3W5-qBey_4qrPvLMxVxmdwy6y1lPkLSlmz5Ig” -d “grant_type=authorization_code&code=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL2V1LnBveW50Lm5ldCIsImlhdCI6MTU1OTg5NzYyMiwiZXhwIjoxNTU5ODk4NTIyLCJzdWIiOiJ1cm46YWlkOmYxOGU4ZGVmLTRjYmMtNDUwNC04Y2ViLTc4ZDgyOTA4OWIxNCIsInBveW50LmJpeiI6IjlkMzIxYTZmLWQ4NjktNGYxYi05NDYwLTkxNDI2NzM5OWVkOSIsInBveW50LnVpZCI6MTcyMDgxMX0.TEdorZr_HdqhjzIxUzWQcoz-NYIMfoOQj-kQF-ell3OgIWHjH1Dl9ADnICjETk_j6EHeG9C4zIgzCoRt0MuFMmhGXXTfvt7j5uRJ1slvSLKyYRXVplu3m_0aG8YFmBjwyM9ngM5FGwXUiMSYY9jOxNN5Xs0vzrM1I1BmXHqnH9YD0_aAgtNr9RTNFCqf0KgOn9cxDYw3iPyj6uzBEr6YJ31fpApilDRxfzzxt3to_GpGgMek0Eb5KiE5ZxfvROvWCtaR5nP-Lnpk06cY_UQEZm5Y-A4Nl1wSNevzeJo62o1zU2X5RIYYBStqjR5MlYaSzkkU6HGtUhIYdbWw9k8Z9g&redirect_uri=https://etnaonline.comune.catania.gov.it/etnaonline-ServerCIG/testPoynt.jsp”

and i got “code”:“INVALID_ACCESS_TOKEN”,“httpStatus”:401,“message”:“Access token is missing or invalid.”

I’m not able to understand where is the cause of the problem.

I’ve a question: at 10:53 i’ve made login using my credentials; is this correct? I’m enabled to create app and give permissions in the shop, but i don’t know if this step should be done with different kind of credentials…

Thank you

@sirio.candini
did you found the solution?