Authentication

Authentication verifies your application and authorizes access to bKash APIs. Use your application credentials to obtain an access token, then include the token with API requests that require authentication.

Token Management

Token Management explains how to generate and maintain the access token required for authenticated API requests.

Grant Token — Get an access token using your application credentials.
Refresh Token — Get a new access token when the current token expires.

Bearer Token

Send the access token in the HTTP Authorization header:

HTTP

Authorization: Bearer <token>

Keep your access token secure, use HTTPS for API communication, and store the token securely on your server.

Grant Token Request

POST /v1.2.0-beta/tokenized/checkout/token/grant

Headers:
  username: sandboxTokenizedUser02
  password: sandboxTokenizedUser02@12345
  Content-Type: application/json

Body:
{
  "app_key": "4f6o0cjiki2rfm34kfdadl1eqq",
  "app_secret": "2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b"
}