To successfully integrate with Aurora you'll need your account set up. You will be asked to provide information about your business like banking information and legal name of the organisation. This will allow us to generate and provide you with the credentials which you can use to authorise on API side. This API documentation is designed to enable seamless merchants onboarding with Aurora. With our auto-underwriting and auto-boarding features your merchants will be able to process their first transaction less than in an hour (with rare exceptions which may take up to a day).

Please connect with the Aurora Integrations team. They will assist you in the creation of a user account. After your account is set up, you will be able to access our APIs and RISE CRM system with the credentials received.

This guide provides a clear step-by-step process for obtaining an access token and refreshing it using the OAuth2 authorization mechanism.

To access Rise CRM API, you need to obtain an access token using the Client Credentials Flow.

Prerequisites

• You must obtain application credentials from the Aurora Integrations Team:

  • Username
  • Password
  • Client ID
  • Client Secret

• Ensure that you understand the API endpoints and their authentication methods.

• Your integration must be certified by the Aurora Integrations Team before you can use it in production.

Requesting an Access Token

To request an access token, send a POST request to the following endpoint:

POST https://uat.rwaapps.net:8888/oauth2/token

All parameters in the URL or request body must be URL Encoded.

Request Parameters (Form URL Encoded)

Parameter	Type	Required	Description
grant_type	string	Yes	Must be password
username	string	Yes	Your provided username
password	string	Yes	Your provided password
client_id	string	Yes	Your provided Client ID
client_secret	string	Yes	Your provided Client Secret
scope	string	Yes	Must be offline_access to obtain a refresh token

Example Request

POST https://uat.rwaapps.net:8888/oauth2/token
Content-Type: application/x-www-form-urlencoded

grant_type=password&username=user@example.com&password=yourpassword&client_id=your-client-id&client_secret=your-client-secret&scope=offline_access

Example Response

{
  "access_token": "your-access-token",
  "refresh_token": "your-refresh-token",
  "expires_in": 3600,
  "token_type": "Bearer"
}

Once your access token expires, you can use the refresh token to obtain a new one without re-entering credentials.

Requesting a New Access Token

To refresh the access token, send a POST request to the same endpoint:

POST https://uat.rwaapps.net:8888/oauth2/token

All parameters in the URL or request body must be URL Encoded.

Request Parameters (Form URL Encoded)

Parameter	Type	Required	Description
grant_type	string	Yes	Must be refresh_token
refresh_token	string	Yes	The refresh token obtained from the access token response
client_id	string	Yes	Your provided Client ID
client_secret	string	Yes	Your provided Client Secret

Example Request

POST https://uat.rwaapps.net:8888/oauth2/token
Content-Type: application/x-www-form-urlencoded

grant_type=refresh_token&refresh_token=your-refresh-token&client_id=your-client-id&client_secret=your-client-secret

Example Response

{
  "access_token": "new-access-token",
  "refresh_token": "new-refresh-token",
  "expires_in": 3600,
  "token_type": "Bearer"
}

• Keep your Client ID, Client Secret, and Refresh Token secure.
• Do not expose your credentials in client-side code or public repositories.
• Always use HTTPS to protect sensitive information.

For further assistance, please contact the Aurora Integrations Team.

1. We are excited to introduce our boarding flow via API. We are supporting several boarding flows. If you already know all the relevant information about your merchant - you can use Submit Application request. It will give you the result in seconds and when we receive all the needed consents from the merchant we can start our auto-underwriting and auto-boarding processes. In case you are still collecting required info - you can use Create Draft Application request. This will give you time for any updates (Update Draft Application request) and once you're ready use Submit Draft Application request.