Skip to main content
This page covers every field related to authentication flows, security checks, webhook signatures, and component health.

1. OAuth2 and authorization fields


FieldDescriptionUsed in
accessTokenJWT access tokenAuth, PIX
refreshTokenRefresh tokenAuth
idTokenOpenID Connect ID tokenAuth
tokenTypeToken type (Bearer)Auth, PIX
expiresInExpiration time (seconds)Auth, PIX
grantTypeOAuth2 grant typeAuth
clientIdOAuth2 client IDAuth, PIX, Flowker
clientSecretOAuth2 client secretAuth, PIX
usernameUsernameAuth, Identity
passwordPasswordAuth, Identity
scopeRequested scopeAuth, PIX
scopesScopes listFlowker
subSubject identifierAuth
audAudienceAuth
issIssuerAuth
iatIssued atAuth
expExpirationAuth
nbfNot beforeAuth
jtiJWT IDAuth
activeToken active flagAuth
authorizedAuthorization resultAuth
resourceTarget resourceAuth
actionAction on the resourceAuth
redirectUriOAuth redirect URIFlowker
stateOAuth opaque stateFlowker

2. Webhooks and notifications


FieldDescriptionUsed in
X-Webhook-IDWebhook identifierFlowker
X-Webhook-SignatureWebhook HMAC signatureFlowker
idReqJdPiJD request identifierPIX
pagadorPIX payerPIX
recebedorPIX receiverPIX
valorPIX valuePIX
dtHrOpPIX operation timestampPIX
descricaoOperation descriptionPIX
endToEndIdOriginalOriginal E2E IDPIX
endToEndIdDevolucaoReturn E2E IDPIX
codigoDevolucaoReturn reason codePIX
motivoDevolucaoReturn reasonPIX
refundUrlNotificationRefund notification URLPIX

3. Health and monitoring


FieldDescriptionUsed in
statusGeneral statusPIX, JD Mock, Flowker
servicesDependent services statusPIX
databaseDatabase statusPIX
redisRedis statusPIX
jdJD integration statusPIX