Setup
1
2
Scopes
Default scopes:openid, email, profile.
Paybin also defines
merchant:*, transaction:*, wallet:* and kyc:* scopes. Some need specific roles on the Paybin side. Pass them through scopes.
How it works
- Authorization Code flow with PKCE (S256). Issuer
https://idp.paybin.io, endpoints under/connect/authorize,/connect/tokenand/connect/userinfo. - Client credentials go in the form body. Paybin also accepts them in a basic header.
- The profile comes from the userinfo endpoint.
email_verifiedis passed through asemailVerified, so a verified Paybin email can link to an existing account.