Authorization

Basic Auth

Shufti Pro provides Authorization to clients through the Basic Auth header. Your Public Key will serve as your Username while the Secret Key will serve as your Password. The API will require this header for every request.

Shufti Pro API uses API keys to authenticate requests. You can view and manage your API keys in your Shufti Pro Backoffice. Authorization to API is performed via HTTP Basic Auth & Access Token. The verification request will fail without authorization.

BASIC AUTH

/POST / HTTP/1.1
//Host: api.shuftipro.com
//Content-Type: application/json
//Authorization: Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw== 
{
  "reference"    : "1234567",
  "callback_url" : "http://www.example.com/",
  "email"        : "[email protected]",
  "country"      : "GB",
  "language"     : "EN",
  "verification_mode" : "any",
  "kyi": {
    "questionnaire_type":"pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }

}

let payload = {
    reference         : "ref-".rand(4,444).rand(4,444),
    callback_url      : "https://yourdomain.com/profile/sp-notify-callback",
    email             : "[email protected]",
    country           : "GB",
    language          : "EN",
    verification_mode : "any",
    kyi: {
        questionnaire_type:"pre_kyc",
        uuid: ["uuid of KYI-Model"]
    }
    
}
var token = btoa("YOUR_CLIENT_ID:YOUR_SECRET_KEY");
fetch('https://api.shuftipro.com/', {  method : 'post',
  headers : {
    'Accept'        : 'application/json',
    'Content-Type'  : 'application/json',
    'Authorization' : 'Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==' 
  },
  body: JSON.stringify(payload)}).then(function(response) {
     return response.json();
}).then(function(data) { return data; });

<?php
$url = 'https://api.shuftipro.com/';
$client_id  = 'YOUR-CLIENT-ID';
$secret_key = 'YOUR-SECRET-KEY';
$verification_request = [
    "reference"         => "ref-".rand(4,444).rand(4,444),
    "callback_url"      => "https://yourdomain.com/profile/notifyCallback",
    "email"             => "[email protected]",
    "country"           => "GB",
    "language"          => "EN",
    "verification_mode" => "any",
];
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
$auth = $client_id.":".$secret_key;
$headers = ['Content-Type: application/json'];
$post_data = json_encode($verification_request);
$response = send_curl($url, $post_data, $headers, $auth);
function send_curl($url, $post_data, $headers, $auth){
    $ch = curl_init();
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
        curl_setopt($ch, CURLOPT_USERPWD, $auth);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_HEADER, 1);
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
        $html_response = curl_exec($ch);
        $header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
        $headers = substr($html_response, 0, $header_size);
        $body = substr($html_response, $header_size);
        curl_close($ch);
        return json_decode($body,true);
}
echo $response['verification_url'];

import requests, base64, json, hashlib 
from random import randint 
url = 'https://api.shuftipro.com/'
client_id  = 'YOUR-CLIENT-ID'
secret_key = 'YOUR-SECRET-KEY'
verification_request = {
    "reference"         :   "ref-{}{}".format(randint(1000, 9999), randint(1000, 9999)),
    "callback_url"      :   "https://yourdomain.com/profile/notifyCallback",
    "email"             :   "[email protected]",
    "country"           :   "GB", 
    "language"          :   "EN",
    "verification_mode" :   "any"
}
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
auth = '{}:{}'.format(client_id, secret_key)
b64Val = base64.b64encode(auth.encode()).decode()
response = requests.post(url, 
      headers={"Authorization": "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==%s" % b64Val, "Content-Type": "application/json"},
      data=json.dumps(verification_request))
json_response = json.loads(response.content)
print('Verification URL: {}'.format(json_response))

require 'uri'
require 'net/http'
require 'base64'
require 'json'
require 'open-uri'
url = URI("https://api.shuftipro.com/")
CLIENT_ID   = "YOUR-CLIENT-ID"
SECRET_KEY  = "YOUR-SECRET-KEY"
verification_request = { 
    reference:          "Ref-"+ (0...8).map { (65 + rand(26)).chr }.join,
    callback_url:       "https://yourdomain.com/profile/notifyCallback",
    email:              "[email protected]",
    country:            "GB",
    language:           "EN",
    redirect_url:       "http://www.example.com",
    verification_mode:  "any"
}
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
header_auth = Base64.strict_encode64("#{CLIENT_ID}:#{SECRET_KEY}")
request["Content-Type"]  = "application/json"
request["Authorization"] = "Basic #{header_auth}"
request.body = verification_request.to_json
response = http.request(request)
puts response.read_body

import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.util.Base64;
import javax.net.ssl.HttpsURLConnection;

public class Main {
   public static void main(String[] args) throws Exception {
       String url = "https://api.shuftipro.com/";
       String CLIENT_ID = "CLIENT_ID";
       String SECRET_KEY = "SECRET_KEY";
       URL obj = new URL(url);
       HttpsURLConnection con = (HttpsURLConnection) obj.openConnection();

       // Add request header
       con.setRequestMethod("POST");
       con.setRequestProperty("Content-Type", "application/json");
       String basicAuth = "Basic " + Base64.getEncoder().encodeToString((CLIENT_ID + ":" + SECRET_KEY).getBytes(StandardCharsets.UTF_8));    
       con.setRequestProperty("Authorization", basicAuth);

       String payload = "{\n    \"reference\"    : \"1234567\",\n    \"callback_url\" : \"http://www.example.com/\",\n    \"email\"        : \"[email protected]\",\n    \"country\"      : \"GB\",\n    \"language\"     : \"EN\",\n    \"verification_mode\" : \"any\",\n    \"kyi\": {\n        \"questionnaire_type\":\"pre_kyc\",\n        \"uuid\": [\"uuid of KYI-Model\"]\n    }\n\n}";

       // Send post request
       con.setDoOutput(true);
       DataOutputStream wr = new DataOutputStream(con.getOutputStream());
       wr.writeBytes(payload);
       wr.flush();
       wr.close();

       int responseCode = con.getResponseCode();
       System.out.println("\nSending 'POST' request to URL : " + url);
       System.out.println("Payload : " + payload);
       System.out.println("Response Code : " + responseCode);

       BufferedReader in = new BufferedReader(
               new InputStreamReader(con.getInputStream()));
       System.out.println(in.toString());
       String inputLine;
       StringBuffer response = new StringBuffer();

       while ((inputLine = in.readLine()) != null) {
           response.append(inputLine);
       }
       in.close();

       // Print the response
       System.out.println(response.toString());
   }
}

curl --location --request POST 'https://api.shuftipro.com' \
--header 'Authorization: Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==' \
--header 'Content-Type: application/json' \
--data-raw '{
   "reference"    : "1234567",
   "callback_url" : "http://www.example.com/",
   "email"        : "[email protected]",
   "country"      : "GB",
   "language"     : "EN",
   "verification_mode" : "any",
   "kyi": {
       "questionnaire_type":"pre_kyc",
       "uuid": ["uuid of KYI-Model"]
   }

}'

var client = new RestClient("https://api.shuftipro.com/");
client.Timeout = -1;
var request = new RestRequest(Method.POST);
request.AddHeader("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==");
request.AddHeader("Content-Type", "application/json");
var body = @"{" + "\n" +
@"    ""reference""    : ""1234567""," + "\n" +
@"    ""callback_url"" : ""http://www.example.com/""," + "\n" +
@"    ""email""        : ""[email protected]""," + "\n" +
@"    ""country""      : ""GB""," + "\n" +
@"    ""language""     : ""EN""," + "\n" +
@"    ""verification_mode"" : ""any""," + "\n" +
@"    ""kyi"": {" + "\n" +
@"        ""questionnaire_type"":""pre_kyc""," + "\n" +
@"        ""uuid"": [""uuid of KYI-Model""]" + "\n" +
@"    }" + "\n" +
@"" + "\n" +
@"}";
request.AddParameter("application/json", body,  ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
Console.WriteLine(response.Content);

package main

import (
 "fmt"
 "strings"
 "net/http"
 "io/ioutil"
)

func main() {

 url := "https://api.shuftipro.com/"
 method := "POST"

 payload := strings.NewReader(`{
   "reference"    : "1234567",
   "callback_url" : "http://www.example.com/",
   "email"        : "[email protected]",
   "country"      : "GB",
   "language"     : "EN",
   "verification_mode" : "any",
   "kyi": {
       "questionnaire_type":"pre_kyc",
       "uuid": ["uuid of KYI-Model"]
   }

}`)

 client := &http.Client {
 }
 req, err := http.NewRequest(method, url, payload)

 if err != nil {
   fmt.Println(err)
   return
 }
 req.Header.Add("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==")
 req.Header.Add("Content-Type", "application/json")

 res, err := client.Do(req)
 if err != nil {
   fmt.Println(err)
   return
 }
 defer res.Body.Close()

 body, err := ioutil.ReadAll(res.Body)
 if err != nil {
   fmt.Println(err)
   return
 }
 fmt.Println(string(body))
}

Shufti Pro provides Authorization to clients through the Basic Auth header. Your Client ID will serve as your Username while the Secret Key will serve as your Password. The API will require this header for every request.

Fields	Required	Description
username	Yes	Enter Client ID as username.
password	Yes	Enter your Secret Key as password.

ACCESS TOKEN

Shufti Pro provides Bearer Access Token Authorization method. Client can generate temporary access token using new access token endpoint. The shared token will be used to authorize API requests. The token shared with the client will be valid for 10 minutes and can be used once only.

Field	Required	Description
Authorization	Yes	Enter your authorization token.

ACCESS TOKEN

//POST /get/access/token HTTP/1.1
//Host: api.shuftipro.com
//Content-Type: application/json
//Authorization: Bearer NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==

{
  "reference"    : "1234567",
  "callback_url" : "http://www.example.com/",
  "email"        : "[email protected]",
  "country"      : "GB",
  "language"     : "EN",
  "verification_mode" : "any",
  "kyi": {
    "questionnaire_type":"pre_kyc",
    "uuid": [""]
  }
}

let payload = {
    reference         : "ref-".rand(4,444).rand(4,444),
    callback_url      : "https://yourdomain.com/profile/sp-notify-callback",
    email             : "[email protected]",
    country           : "GB",
    language          : "EN",
    verification_mode : "any",
    kyi: {
        questionnaire_type:"pre_kyc",
        uuid: ["uuid of KYI-Model"]
    }

}
var token = btoa("YOUR_CLIENT_ID:YOUR_SECRET_KEY");
fetch('https://api.shuftipro.com/get/access/token', {  method : 'post',
    headers : {
        'Accept'        : 'application/json',
        'Content-Type'  : 'application/json',
        'Authorization' : 'Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw=='
    },
    body: JSON.stringify(payload)}).then(function(response) {
    return response.json();
}).then(function(data) { return data; });

<?php
$url = 'https://api.shuftipro.com/get/access/token';
$client_id  = 'YOUR-CLIENT-ID';
$secret_key = 'YOUR-SECRET-KEY';
$verification_request = [
    "reference"         => "ref-".rand(4,444).rand(4,444),
    "callback_url"      => "https://yourdomain.com/profile/notifyCallback",
    "email"             => "[email protected]",
    "country"           => "GB",
    "language"          => "EN",
    "verification_mode" => "any",
];
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
$auth = $client_id.":".$secret_key;
$headers = ['Content-Type: application/json'];
$post_data = json_encode($verification_request);
$response = send_curl($url, $post_data, $headers, $auth);
function send_curl($url, $post_data, $headers, $auth){
    $ch = curl_init();
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
        curl_setopt($ch, CURLOPT_USERPWD, $auth);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_HEADER, 1);
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
        $html_response = curl_exec($ch);
        $header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
        $headers = substr($html_response, 0, $header_size);
        $body = substr($html_response, $header_size);
        curl_close($ch);
        return json_decode($body,true);
}
echo $response['verification_url'];

import requests, base64, json, hashlib 
from random import randint 
url = 'https://api.shuftipro.com/get/access/token'
client_id  = 'YOUR-CLIENT-ID'
secret_key = 'YOUR-SECRET-KEY'
verification_request = {
    "reference"         :   "ref-{}{}".format(randint(1000, 9999), randint(1000, 9999)),
    "callback_url"      :   "https://yourdomain.com/profile/notifyCallback",
    "email"             :   "[email protected]",
    "country"           :   "GB", 
    "language"          :   "EN",
    "verification_mode" :   "any"
}
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
auth = '{}:{}'.format(client_id, secret_key)
b64Val = base64.b64encode(auth.encode()).decode()
response = requests.post(url, 
      headers={"Authorization": "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==%s" % b64Val, "Content-Type": "application/json"},
      data=json.dumps(verification_request))
json_response = json.loads(response.content)
print('Verification URL: {}'.format(json_response))

require 'uri'
require 'net/http'
require 'base64'
require 'json'
require 'open-uri'
url = URI("https://api.shuftipro.com/get/access/token")
CLIENT_ID   = "YOUR-CLIENT-ID"
SECRET_KEY  = "YOUR-SECRET-KEY"
verification_request = { 
    reference:          "Ref-"+ (0...8).map { (65 + rand(26)).chr }.join,
    callback_url:       "https://yourdomain.com/profile/notifyCallback",
    email:              "[email protected]",
    country:            "GB",
    language:           "EN",
    redirect_url:       "http://www.example.com",
    verification_mode:  "any"
}
"kyi": {
    "questionnaire_type": "pre_kyc",
    "uuid": ["uuid of KYI-Model"]
  }
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
header_auth = Base64.strict_encode64("#{CLIENT_ID}:#{SECRET_KEY}")
request["Content-Type"]  = "application/json"
request["Authorization"] = "Basic #{header_auth}"
request.body = verification_request.to_json
response = http.request(request)
puts response.read_body

import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.util.Base64;
import javax.net.ssl.HttpsURLConnection;

public class Main {
   public static void main(String[] args) throws Exception {
       String url = "https://api.shuftipro.com/get/access/token";
       String CLIENT_ID = "CLIENT_ID";
       String SECRET_KEY = "SECRET_KEY";
       URL obj = new URL(url);
       HttpsURLConnection con = (HttpsURLConnection) obj.openConnection();

       // Add request header
       con.setRequestMethod("POST");
       con.setRequestProperty("Content-Type", "application/json");
       String basicAuth = "Basic " + Base64.getEncoder().encodeToString((CLIENT_ID + ":" + SECRET_KEY).getBytes(StandardCharsets.UTF_8));    
       con.setRequestProperty("Authorization", basicAuth);

       String payload = "{\n    \"reference\"    : \"1234567\",\n    \"callback_url\" : \"http://www.example.com/\",\n    \"email\"        : \"[email protected]\",\n    \"country\"      : \"GB\",\n    \"language\"     : \"EN\",\n    \"verification_mode\" : \"any\",\n    \"kyi\": {\n        \"questionnaire_type\":\"pre_kyc\",\n        \"uuid\": [\"uuid of KYI-Model\"]\n    }\n\n}";

       // Send post request
       con.setDoOutput(true);
       DataOutputStream wr = new DataOutputStream(con.getOutputStream());
       wr.writeBytes(payload);
       wr.flush();
       wr.close();

       int responseCode = con.getResponseCode();
       System.out.println("\nSending 'POST' request to URL : " + url);
       System.out.println("Payload : " + payload);
       System.out.println("Response Code : " + responseCode);

       BufferedReader in = new BufferedReader(
               new InputStreamReader(con.getInputStream()));
       System.out.println(in.toString());
       String inputLine;
       StringBuffer response = new StringBuffer();

       while ((inputLine = in.readLine()) != null) {
           response.append(inputLine);
       }
       in.close();

       // Print the response
       System.out.println(response.toString());
   }
}

curl --location --request POST 'https://api.shuftipro.com/get/access/token' \
--header 'Authorization: Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==' \
--header 'Content-Type: application/json' \
--data-raw '{
   "reference"    : "1234567",
   "callback_url" : "http://www.example.com/",
   "email"        : "[email protected]",
   "country"      : "GB",
   "language"     : "EN",
   "verification_mode" : "any",
   "kyi": {
       "questionnaire_type":"pre_kyc",
       "uuid": ["uuid of KYI-Model"]
   }

}'

var client = new RestClient("https://api.shuftipro.com/get/access/token");
client.Timeout = -1;
var request = new RestRequest(Method.POST);
request.AddHeader("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==");
request.AddHeader("Content-Type", "application/json");
var body = @"{" + "\n" +
@"    ""reference""    : ""1234567""," + "\n" +
@"    ""callback_url"" : ""http://www.example.com/""," + "\n" +
@"    ""email""        : ""[email protected]""," + "\n" +
@"    ""country""      : ""GB""," + "\n" +
@"    ""language""     : ""EN""," + "\n" +
@"    ""verification_mode"" : ""any""," + "\n" +
@"    ""kyi"": {" + "\n" +
@"        ""questionnaire_type"":""pre_kyc""," + "\n" +
@"        ""uuid"": [""uuid of KYI-Model""]" + "\n" +
@"    }" + "\n" +
@"" + "\n" +
@"}";
request.AddParameter("application/json", body,  ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
Console.WriteLine(response.Content);

package main

import (
 "fmt"
 "strings"
 "net/http"
 "io/ioutil"
)

func main() {

 url := "https://api.shuftipro.com/get/access/token"
 method := "POST"

 payload := strings.NewReader(`{
   "reference"    : "1234567",
   "callback_url" : "http://www.example.com/",
   "email"        : "[email protected]",
   "country"      : "GB",
   "language"     : "EN",
   "verification_mode" : "any",
   "kyi": {
       "questionnaire_type":"pre_kyc",
       "uuid": ["uuid of KYI-Model"]
   }

}`)

 client := &http.Client {
 }
 req, err := http.NewRequest(method, url, payload)

 if err != nil {
   fmt.Println(err)
   return
 }
 req.Header.Add("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==")
 req.Header.Add("Content-Type", "application/json")

 res, err := client.Do(req)
 if err != nil {
   fmt.Println(err)
   return
 }
 defer res.Body.Close()

 body, err := ioutil.ReadAll(res.Body)
 if err != nil {
   fmt.Println(err)
   return
 }
 fmt.Println(string(body))
}

Access Token Request

This end-point is used to generate an access_token which is used to authorize API requests. This token will be useful for 10 minutes and can be used for one request to the API.

{
    "access_token": "NzA4N2I2YjAwZjQyYmUyNDc1YTUxZmZiMzJjMTQ4M2IxOTY2ZTFmMg=="
}

Sample Access Token Request

//POST https://api.shuftipro.com/get/access/token HTTP/1.1
//Host: api.shuftipro.com
//Content-Type: application/json
//Authorization: Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw== 

//Use your Shufti Pro account client id and secret key
var token = btoa("YOUR_CLIENT_ID:YOUR_SECRET_KEY"); //BASIC AUTH TOKEN

//Dispatch request via fetch API or with whatever else which best suits for you
fetch('https://api.shuftipro.com/get/access/token', 
{
  method : 'post',
  headers : {
    'Accept'        : 'application/json',
    'Content-Type'  : 'application/json',
    'Authorization' : 'Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw== ' 
  }
})
.then(function(response) {
     return response.json();
}).then(function(data) {
     return data;
});

//Use your Shufti Pro account client id and secret key
var token = btoa("YOUR_CLIENT_ID:YOUR_SECRET_KEY"); //BASIC AUTH TOKEN

//Dispatch request via fetch API or with whatever else which best suits for you
fetch('https://api.shuftipro.com/get/access/token', 
{
  method : 'post',
  headers : {
    'Accept'        : 'application/json',
    'Content-Type'  : 'application/json',
    'Authorization' : 'Basic ' +token
  }
})
.then(function(response) {
     return response.json();
}).then(function(data) {
     return data;
});

import base64, requests, json, hashlib
from random import randint

'''
Python 2
--------
import urllib2

Python 3
--------
import urllib.request
urllib.request.urlopen(url).read()
'''

url = 'https://api.shuftipro.com/get/access/token'
# Your Shufti Pro account Client ID
client_id  = 'YOUR-CLIENT-ID'
# Your Shufti Pro account Secret Key
secret_key = 'YOUR-SECRET-KEY'

# Calling Shufti Pro request API using python requests
auth = '{}:{}'.format(client_id, secret_key)
b64Val = base64.b64encode(auth.encode()).decode()
response = requests.post(url, 
        headers={"Authorization": "Basic %s" % b64Val, "Content-Type": "application/json"})

# Calculating signature for verification
calculated_signature = hashlib.sha256('{}{}'.format(response.content.decode(), secret_key).encode()).hexdigest()

# Convert json string to json object
json_response = json.loads(response.content)
sp_signature = response.headers.get('Signature','')

if sp_signature == calculated_signature:
    print ('Response : {}'.format(json_response))
else:
    print ('Invalid Signature: {}'.format(json_response))

require 'uri'
require 'net/http'
require 'base64'
require 'json'

url = URI("https://api.shuftipro.com/get/access/token")
# Your Shufti Pro account Client ID
CLIENT_ID   = "YOUR-CLIENT-ID"
# Your Shufti Pro account Secret Key
SECRET_KEY  = "YOUR-SECRET-KEY"

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)

header_auth = Base64.strict_encode64("#{CLIENT_ID}:#{SECRET_KEY}")
request["Content-Type"]  = "application/json"
request["Authorization"] = "Basic #{header_auth}"

response = http.request(request)
response_headers =  response.instance_variable_get("@header")
response_data    = response.read_body

sp_signature     = !(response_headers['signature'].nil?) ? response_headers['signature'].join(',') : ""
calculated_signature = Digest::SHA256.hexdigest response_data + SECRET_KEY

if sp_signature == calculated_signature
   puts response_data
else
   puts "Invalid signature"
end

import java.io.BufferedReader;
import java.io.DataOutputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.util.Base64;
import javax.net.ssl.HttpsURLConnection;

public class Main {
   public static void main(String[] args) throws Exception {
       String url = "https://api.shuftipro.com/";
       String CLIENT_ID = "CLIENT_ID";
       String SECRET_KEY = "SECRET_KEY";
       URL obj = new URL(url);
       HttpsURLConnection con = (HttpsURLConnection) obj.openConnection();

       // Add request header
       con.setRequestMethod("POST");
       con.setRequestProperty("Content-Type", "application/json");
       String basicAuth = "Basic " + Base64.getEncoder().encodeToString((CLIENT_ID + ":" + SECRET_KEY).getBytes(StandardCharsets.UTF_8));    
       con.setRequestProperty("Authorization", basicAuth);

       String payload = "{\n    \"reference\"    : \"1234567\",\n    \"callback_url\" : \"http://www.example.com/\",\n    \"email\"        : \"[email protected]\",\n    \"country\"      : \"GB\",\n    \"language\"     : \"EN\",\n    \"verification_mode\" : \"any\",\n    \"face\" : {\n        \"proof\"            : \"\"\n    }\n}";

       // Send post request
       con.setDoOutput(true);
       DataOutputStream wr = new DataOutputStream(con.getOutputStream());
       wr.writeBytes(payload);
       wr.flush();
       wr.close();

       int responseCode = con.getResponseCode();
       System.out.println("\nSending 'POST' request to URL : " + url);
       System.out.println("Payload : " + payload);
       System.out.println("Response Code : " + responseCode);

       BufferedReader in = new BufferedReader(
               new InputStreamReader(con.getInputStream()));
       System.out.println(in.toString());
       String inputLine;
       StringBuffer response = new StringBuffer();

       while ((inputLine = in.readLine()) != null) {
           response.append(inputLine);
       }
       in.close();

       // Print the response
       System.out.println(response.toString());
   }
}

curl --location --request POST 'https://api.shuftipro.com/get/access/token' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==' \
--data-raw ''

var client = new RestClient("https://api.shuftipro.com/get/access/token");
client.Timeout = -1;
var request = new RestRequest(Method.POST);
request.AddHeader("Content-Type", "application/json");
request.AddHeader("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==");
var body = @"";
request.AddParameter("application/json", body,  ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
Console.WriteLine(response.Content);

package main

import (
 "fmt"
 "strings"
 "net/http"
 "io/ioutil"
)

func main() {

 url := "https://api.shuftipro.com/get/access/token"
 method := "POST"

 payload := strings.NewReader(``)

 client := &http.Client {
 }
 req, err := http.NewRequest(method, url, payload)

 if err != nil {
   fmt.Println(err)
   return
 }
 req.Header.Add("Content-Type", "application/json")
 req.Header.Add("Authorization", "Basic NmI4NmIyNzNmZjM0ZmNlMTlkNmI4WJRTUxINTJHUw==")

 res, err := client.Do(req)
 if err != nil {
   fmt.Println(err)
   return
 }
 defer res.Body.Close()

 body, err := ioutil.ReadAll(res.Body)
 if err != nil {
   fmt.Println(err)
   return
 }
 fmt.Println(string(body))
}

Basic Auth​

ACCESS TOKEN​

Access Token Request​

Basic Auth

ACCESS TOKEN

Access Token Request