Skip to main content

Merchant Authentication Service

Overview​

The Merchant Authentication Service generates secure credentials for accessing payment processor APIs using the Java SDK. These short-lived tokens provide secure access without storing secrets client-side.

Business Use Cases:

  • Frontend SDKs - Generate tokens for client-side payment flows
  • Wallet payments - Initialize Apple Pay, Google Pay sessions
  • Session management - Maintain secure state across payment operations
  • Multi-party payments - Secure delegated access

Operations​

OperationDescriptionUse When
createAccessTokenGenerate short-lived connector authentication token. Provides secure API access credentials.Need temporary API access token
createSessionTokenCreate session token for payment processing. Maintains session state across operations.Starting a multi-step payment flow
createSdkSessionTokenInitialize wallet payment sessions. Sets up Apple Pay, Google Pay context.Enabling wallet payments

SDK Setup​

import com.hyperswitch.prism.MerchantAuthenticationClient;

MerchantAuthenticationClient authClient = MerchantAuthenticationClient.builder()
    .connector("stripe")
    .apiKey("YOUR_API_KEY")
    .environment("SANDBOX")
    .build();

Security Best Practices​

  • Never store tokens long-term
  • Use tokens immediately after creation
  • Handle token expiration gracefully
  • Use HTTPS for all token transmissions

Next Steps​