Initial authorization endpoint

GEThttps://merchant.shuttleglobal.com/authorize

Language

Credentials

This endpoint needs no credentials.

Base URLRemember on this device

Kept in this browser tab unless you tick Remember; don't on a shared computer. Use keys from a sandbox account to test without moving money.

Parameters

Query

response_typerequiredclient_idrequiredredirect_urlrequiredscopestate

cURL request

curl --request GET \
  --url https://merchant.shuttleglobal.com/authorize

const url = 'https://merchant.shuttleglobal.com/authorize';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

require 'uri'
require 'net/http'

url = URI("https://merchant.shuttleglobal.com/authorize")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

package main

import (
  "fmt"
  "net/http"
  "io"
)

func main() {

  url := "https://merchant.shuttleglobal.com/authorize"

  req, _ := http.NewRequest("GET", url, nil)

  res, _ := http.DefaultClient.Do(req)

  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(res)
  fmt.Println(string(body))

}

Response

Redirect to Shuttle's login page or return an error

No response body.

GET

/authorize

Initiates the OAuth 2.0 authorization flow on merchant.shuttleglobal.com

Flow:

Your application redirects the user to this endpoint with required parameters
This endpoint responds with a 302 redirect to Shuttle’s login page
On the login page, the user authenticates and grants permission to your application
After successful authentication and consent, the user is redirected to your redirect_url with an authorization code
Use this code immediately with the /token endpoint to obtain tokens IMPORTANT: The authorization code expires after 15 minutes

Notes:

The authorization code is valid for only 15 minutes from the time it’s generated
The state parameter is recommended for CSRF protection
Your redirect_url must match one of your pre-registered URLs

Parameters

Query Parameters

response_type

required

string · enum

Must be ‘code’ for authorization code flow

Allowed values: code

client_id

required

string

redirect_url

required

string · uri

scope

string

Space-delimited list of requested scopes

state

string

Value used to maintain state between request and callback

Responses

302

Redirect to Shuttle’s login page or return an error

text/plain

One of:

object
object

Redirect to login page

object

login_url

string · uri

URL of Shuttle’s login page

state

string

The state value from the request (if provided)

Headers

Location

string · uri

URL of the login page where user will authenticate and grant permissions

Was this page helpful?