Secure authentication for API access and user verification
The LivePay system uses Bearer token authentication with dual-key security. All API requests require both a Secret Key in the Authorization header and a Public Key in the request body for enhanced security.
The system validates your Secret Key from the Authorization header and matches it with your Public Key in the request body. Both keys must be valid and the account must be active for successful authentication.
All API requests should be made to this base URL
https://livepay.me/api/v1
/deposit
/withdraw
/transactions
/user-balance.php
/transaction-status.php
Extract Bearer token from Authorization header and validate Secret Key
Check user status, API access, and account activation status
Validate Public Key in request body matches the user's stored key
| Component | Location | Purpose | Validation |
|---|---|---|---|
Secret Key
|
Authorization Header | Primary user identification | Required |
Public Key
|
Request Body | Secondary verification | Required |
User Status
|
System Check | Account activation status | Required |
API Status
|
System Check | API access permission | Required |
| HTTP Status | Error Code | Message | Description |
|---|---|---|---|
| 401 | AUTH_001 | Missing or invalid Authorization header | Bearer token not provided or malformed |
| 401 | AUTH_002 | Invalid Secret Key | Secret key not found in system |
| 401 | AUTH_003 | Invalid user public key | Public key in body doesn't match stored key |
| 401 | AUTH_004 | API access is turned off by user | User has disabled API access |
| 401 | AUTH_005 | Account inactive - submit KYC | User account requires KYC verification |
| 403 | AUTH_006 | API access turned off by admin | Global API access is disabled |