Skip to main content

Setup

1

Get credentials

Register a client in the Paybin developer portal and set the redirect URI:
2

Configure

lib/theauth.ts

Scopes

Default scopes: openid, email, profile. Paybin also defines merchant:*, transaction:*, wallet:* and kyc:* scopes. Some need specific roles on the Paybin side. Pass them through scopes.

How it works

  • Authorization Code flow with PKCE (S256). Issuer https://idp.paybin.io, endpoints under /connect/authorize, /connect/token and /connect/userinfo.
  • Client credentials go in the form body. Paybin also accepts them in a basic header.
  • The profile comes from the userinfo endpoint. email_verified is passed through as emailVerified, so a verified Paybin email can link to an existing account.
Vendor docs: Paybin OpenID Connect.

Endpoints

Last modified on October 19, 2026