Authentication

The Plug & Pay SDK uses JWT tokens for authentication. This guide explains how tokens work and best practices for managing them in your application.

How Authentication Works

1. Your mobile app requests a token from your backend
2. Your backend calls the Create Token API with your API credentials
3. Oobit returns a JWT token
4. Your backend forwards the token to your mobile app
5. Your app initializes the WidgetSDK with the token

Token Expiration

Tokens expire 60 minutes after creation, regardless of user activity. When the token expires, the widget shows a 'Session Expired' modal with a button to return to the app.

See Also

• Create Token API - API reference for token generation