Personal integration

So you want to create an integration just for yourself, between your company in Dinero and some piece of software?

Well, then you've come to the right place. Specifically for personal integrations, you have the option to go around Visma Connect and use a very simple API-key system.

Here we'll take you through it, step by step.

Step 1: Apply for credentials

To be able to interact with your company, you need some developer credentials, specifically a client id and secret. You can apply for these by writing us a short email.

Address: api@dinero.dk
Subject: Personal integration for company-name
Message: Note that you wish to apply for a personal integration. Add a short description of your integration. It is important that this integration will not be public and only for your own use.
Please include the organization id of the organization you wish to integrate to.

You can write us in either danish or english, as to your own preference. We will reply in the language of your choice. :-)

If approved, we'll respond with a personal client id and secret you can use for authentication. We'll respond within a few working days on this type of request(and usually much faster).

Step 2: Encode id and secret

Before being able to fetch an access token, you need to make sure you've base64encoded your client id and secret, separated by a colon, using this formula: client_id:client_secret

You can encode it using this website if you wish: base64encode.org.

For instance, if my client id was rasmus and my secret was dinero, I would base64encode this string: rasmus:dinero - this would give me the following base64encoded id and secret: cmFzbXVzOmRpbmVybw==.

Step 3: Getting an API-key

To get an API-key, you need to go to the organization in Dinero you wish to interact with and generate a new key. You can see here how that is done.

Step 4: Exchanging for an access token

Last step is to actually get your hands on a bearer access token.

You'll need to POST your encoded client_id, secret and API-key to https://authz.dinero.dk/dineroapi/oauth/token, which will return a json with an access token to that specific organization. This access token will last for one hour. When that times out, you can simply fetch a new one.

Take a look at the examples below for the specifics.

Step 5: Make a request!

You are now authenticated and able to interact with all the endpoints in Dinero. You simply add the access token to the header of your request as so: Authorization: Bearer <token>.

Examples

Curl example

curl -X POST \
    https://authz.dinero.dk/dineroapi/oauth/token \
    -H 'authorization: Basic cmFzbXVzOmRpbmVybw==' \
    -H 'content-type: application/x-www-form-urlencoded' \
    -d 'grant_type=password&scope=read%20write&username=yourApiKey&password=yourApiKey'

Http example

    POST /dineroapi/oauth/token HTTP/1.1
    Host: authz.dinero.dk
    Authorization: Basic cmFzbXVzOmRpbmVybw==
    Content-Type: application/x-www-form-urlencoded
    grant_type=password&scope=read write&username=yourApiKey&password=yourApiKey

Php example

function authenticate(string $uri, string $clientId, string $clientSecret, string $apiKey) {
    $data = [
        'grant_type' => 'password',
        'scope' => 'read write',
        'username' => $apiKey,
        'password' => $apiKey,
    ];

    $encodedClientAndSecret = base64_encode($clientId . ":" . $clientSecret);

    $options = [
        'http' => [
            'header' => "Authorization: Basic $encodedClientAndSecret",
            'method'  => 'POST',
            'content' => http_build_query($data)
        ]
    ];

    $context  = stream_context_create($options);

    $resultPayload = file_get_contents($uri, false, $context);
}

Node example

const http = require("https");
const querystring = require('querystring');

const bodyParameters = querystring.stringify({
    'grant_type': 'password',
    'scope=': 'read write',
    'username': 'yourApiKey',
    'password' 'yourApiKey'
});

const options = {
  'method': 'POST',
  'hostname': 'authz.dinero.dk',
  'path': '/dineroapi/oauth/token',
  'headers': {
    'authorization': 'Basic cmFzbXVzOmRpbmVybw==',
    'Content-Type': 'application/x-www-form-urlencoded',
    'Content-Length': bodyParameters.length
  }
};

new Promise((resolve) => {

    var req = http.request(options, (res) => {
        const chunks = [];

        res.on("data", (chunk) => {
            chunks.push(chunk);
        });

        res.on("end", function () {
            const body = Buffer.concat(chunks).toString();
            resolve(JSON.parse(body));
        });
    });

    req.write(bodyParameters);
    req.end();

}).then(tokenResponse => {

    console.log(tokenResponse);
});

Response example

{
    "access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9(...)",
    "token_type":"Bearer",
    "expires_in":3600,
    "refresh_token":null
}