Authentication

A payment is authenticated either with an OTP code or with a redirection link.

Redirection link

The following providers support authentication through a redirection link:

Wave
Ecobank CI
Orange CI and Orange SN

For Orange, the redirection workflow must be requested in the payment attempt: set mobileMoney.workflow to redirection and provide both mobileMoney.onCancelRedirectionUrl and mobileMoney.onFinishRedirectionUrl. If either URL is missing, the request is rejected with a 400 error (invalid_url). The redirection URL is in the nextAction object, for example:

{
    "nextAction": {
        "type": "redirection",
        "message": "mm_wave_live.redirection",
        "data": {
            "url": "https://pay.wave.com/c/wrongUrlForDemo",
            "method": "get",
            "headers": {},
            "data": {}
        }
    }
}

Everything needed to perform the redirection is in the nextAction.data field.

Important

In this example, the customer is redirected with a GET request to https://pay.wave.com/c/wrongUrlForDemo.

HUB2 updates the status of the Payment object once the provider has processed the payment.

Authenticate the payment with an OTP

When nextAction is of type otp, authenticate the payment with the dedicated endpoint and the confirmation code (confirmationCode) provided by the end customer. Authenticate payment Note: this request can also be sent directly from the client side, using the JWT token.

curl --location --request POST 'https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/authentication' \
--header 'Content-Type: application/json' \
--data-raw '{
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
    "confirmationCode": "4567"
}'

import fetch from 'node-fetch';

async function postAuthentication() {
    const response = await fetch('https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/authentication', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json'
        },
        body: JSON.stringify({
            "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
            "confirmationCode": "4567"
        })
    });

    if (response.ok) {
        const result = await response.json();
        console.log(result);
    } else {
        console.log(`HTTP Status: ${response.status}`);
    }
}

postAuthentication();

import requests
import json

url = 'https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/authentication'

headers = {
    'Content-Type': 'application/json',
}

data = {
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
    "confirmationCode": "4567"
}

response = requests.post(url, headers=headers, data=json.dumps(data))

if response.ok:
    print(response.json())
else:
    print(f'HTTP Status: {response.status_code}')

Orange CI and OTP

When a payment is attempted with Orange CI using an OTP, Orange applies a 10-minute timeout.

The payment expires after that timeout, which can degrade the customer experience. To avoid this, ask the customer for the OTP first, before attempting the payment. Once the customer provides the OTP, attempt the payment and include the OTP directly in the request:

curl --location --request POST 'https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/payments' \
--header 'Content-Type: application/json' \
--data-raw '{
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
    "paymentMethod": "mobile_money",
    "country": "CI",
    "provider": "orange",
    "mobileMoney": {
        "msisdn": "00000001",
        "otp": "1234"
    }
}'

import fetch from 'node-fetch';

async function postPayments() {
    const response = await fetch('https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/payments', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json'
        },
        body: JSON.stringify({
            "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
            "paymentMethod": "mobile_money",
            "country": "CI",
            "provider": "orange",
            "mobileMoney": {
                "msisdn": "00000001",
                "otp": "1234"
            }
        })
    });

    if (response.ok) {
        const result = await response.json();
        console.log(result);
    } else {
        console.log(`HTTP Status: ${response.status}`);
    }
}

postPayments();

import requests
import json

url = 'https://api.hub2.io/payment-intents/pi_tffiDaXyWQu203rIXhujW/payments'

headers = {
    'Content-Type': 'application/json',
}

data = {
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpbnRlbnRJZCI6InBpX3RmZmlEYVh5V1F1MjAzcklYaHVqVyIsIm1lcmNoYW50SWQiOiIzIiwibW9kZSI6InNhbmRib3giLCJpYXQiOjE2NTgxMjYxMjV9.1eB6ifC2ldfRw5UstnVa-bQqIdx9_IGLRdwWyXzZR4o",
    "paymentMethod": "mobile_money",
    "country": "CI",
    "provider": "orange",
    "mobileMoney": {
        "msisdn": "00000001",
        "otp": "1234"
    }
}

response = requests.post(url, headers=headers, data=json.dumps(data))

if response.ok:
    print(response.json())
else:
    print(f'HTTP Status: {response.status_code}')

HUB2 sends all the information to Orange, which processes the payment immediately, without a separate authentication step.

Getting started

Transfers

Payments

Webhooks

Processing Only

Payment Links

Submerchants

Other

Redirection link

Important

Authenticate the payment with an OTP

Orange CI and OTP

​Redirection link

Important

​Authenticate the payment with an OTP

​Orange CI and OTP

Redirection link

Authenticate the payment with an OTP

Orange CI and OTP