At xPay, we follow the Basic Auth RFC (RFC 7617) standard for authenticating requests made to our API. This ensures secure and straightforward access to the platform.

​

How Basic Authentication Works

const createHeaders = (username, password) => {
  const auth = `${username}:${password}`;
  const encodedAuth = Buffer.from(auth).toString("base64");
  return {
    Authorization: `Basic ${encodedAuth}`,
  };
};

// Usage
const headers = createHeaders("<xPay Public Key>", "<xPay Private Key>");
console.log(headers);

// Never expose your API keys in your code or publicly.
// For security purposes, always store your keys in your environment variables.
// Exposing your keys can compromise your xPay account and the security of your transactions.

// The axios library is a popular choice for making HTTP requests in Node.js and supports Basic Authentication natively.

In Basic HTTP Authentication, your request will contain an Authorization header with the following format:

Authorization: Basic <credentials>

Where <credentials> represents your xPay authentication details — specifically, your xPay Public Key and xPay Private Key. These are combined and Base64 encoded for transmission:

For example, a typical Authorization header would look like:

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

​

Using Postman for API Authentication

To simulate API requests using Postman, follow these steps:

Postman will automatically handle the Base64 encoding and include the Authorization header in your requests.