Two Way Authentication

♾️🔐 Two-Way Authentication of VAS from Third-Party (Implemented by VAS)

This API validates the Two-way authentication token generated by VAS. Called from Third Party.

Field	Value
Name	Two-WayAuthenticationAPI
URL	http://<domain>/loginservice/vas-auth
Description	Two-way authentication between VAS and third party
Method	POST

📄 Request

Header

Parameter	Description
Content-Type	application/json

Body

Parameter	Data Type	Mandatory/Optional	Description
token	String	M	As received in GetOrderDetails API
userRefId	String	M	Trading User ID
applicationToken	String	M	Token generated at VAS system at time of Publisher Onboarding (shown in Organization → Admin login)

Example Request

{
  "token": "auth_code_generated_by_system",
  "userRefId": "W001",
  "applicationToken": "29fc4b9fdgghhjj"
}

📄 Response

Parameter	Data Type	Mandatory/Optional	Description
Success	Boolean	M	true – Success, false – Failure
Data	String	M	JSON string, details of order
Message	String	M	Success/Failure message for the API
statusCode	String	M	Application status code
traceId	String	M	System generated Code by third-party, used for VAS log purpose

** ✅ Example Success Response**

{
  "success": true,
  "statusCode": "reg-200-043",
  "data": null,
  "message": "vas authorization Successful.",
  "traceId": "98531cc2-315c-4ebc-b8c6-ee1fb13feeaa"
}

** 🔴 Example Failure Response**

{
  "success": false,
  "statusCode": "reg-400-042",
  "data": null,
  "message": "vas authorization failed.",
  "traceId": "98531cc2-315c-4ebc-b8c6-ee1fb13feeaa"
}

---

🔁🛡️ Two-Way Authentication of VAS from Third-Party (Implemented by Third Party)

This API validates the Two-way authentication token generated by Third Party. Called from VAS.

Field	Value
Name	Two-WayAuthenticationAPI
URL	http://<Third party URL>
Description	Two-way authentication between third party and VAS
Method	POST

🧾 Request

Header

Parameter	Mandatory/Optional	Description
Content-Type = application/json	M	application/json

Body

Parameter	Data Type	Mandatory/Optional	Description
sAuthToken	String	M	As received from third party (sTwoWayToken)
sApplicationToken	String	M	Token generated at VAS system at time of Publisher Onboarding (shown in Organization → Admin login)

Example Request

{
  "sAuthToken": "XXXX-XXXX-XXXX-XX",
  "sApplicationToken": "29fc4b9fdgghhjj"
}

📄 Response

Parameter	Data Type	Mandatory/Optional	Description
success	Boolean	M	true – Success, false – Failure
data	String	M	JSON string, details of order
message	String	M	Success/Failure message for the API
statusCode	String	M	Application status code
traceId	String	M	System generated Code by third-party, used for VAS log purpose

** ✅ Example Success Response**

{
  "success": true,
  "statusCode": "reg-200-2066",
  "data": null,
  "message": "Two Way Authentication Success.",
  "traceId": "98531cc2-315c-4ebc-b8c6-ee1fb13feeaa"
}

** 🔴 Exception 1**

{
  "success": false,
  "statusCode": "reg-400-2052",
  "data": null,
  "message": "Two way authentication failed.",
  "traceId": "98531cc2-315c-4ebc-b8c6-ee1fb13feeaa"
}

** 🔴 Exception 2**

{
  "success": false,
  "data": null,
  "message": "Invalid application token.;",
  "statusCode": "vasprd-400-2060",
  "traceId": "79b63bfb-6553-4199-a094-ffb293c9bda9"
}