Skip to main content

Características

Sandbox vs. Production​

When creating an application, you have the option to choose between the sandbox and production environments.

  • The sandbox environment is the test environment where all information is fictitious and predetermined ("mock"). It can be accessed at any time.
  • The production environment is the environment where operations with real information and data take place. It can only be accessed after going through our Application Approval flow.

For more information, visit Environments.

Confidential vs. Public​

When creating an application, you have the option to choose between creating a public application and a confidential application. These application models differ from each other and are therefore intended for different uses:

  • Confidential (Auth code flow + access token): Confidential applications keep the client credentials secure and therefore provide access to the flows in which this information travels, which is what grants access to the banking APIs.
    This is usually the application that runs on the backend.
  • Public (with PKCE): Public applications do not keep the credentials secure and are therefore used in flows where this information DOES NOT TRAVEL (client credentials, for example). These do not grant access to the banking APIs, in order to ensure clients' integrity and security.
    This is usually, but not exclusively, the application that runs on the frontend.

Redirect URI​

The redirect URI is a field that points to a URI to which our system will redirect after the authorization flow's permission consent is completed. The redirect URI is also a fundamental part of the Authorization Code Flow, making up the calls that are performed, and it is where your Authorization Code is sent after the flow finishes.

Client ID and Client Secret​

The client ID and client secret are your application's credentials used during token generation.

  • The Client ID is your application's fixed credential; it changes only when a new application is created or when the application is migrated from Sandbox to Production.
  • The Client Secret is your application's variable credential and must be treated as sensitive data, never shared. You can generate a new Client Secret on our platform, replacing and invalidating the old one.

To find these credentials:

  1. Find the desired application and click the 3 dots to open the options menu:

  2. In this menu, select "Details":

  3. Navigate to the "Keys" tab:

  4. In this tab you will find your Client ID and Client Secret: