User Sync & Authorization API

Register or synchronize a buyer account from the merchant system, and obtain a one-time authorization code for redirecting to iGV pages.

Basic Information

Property	Value
Method	POST
Path	/pay-fac/{merchant}/{ver}/user
Authentication	RSA Signature
Content-Type	application/json

Path Parameters

Parameter	Type	Required	Description
merchant	string	Yes	Merchant ID assigned by iGV (contact the platform to obtain)
ver	string	Yes	API version, current: v1

Request Headers

Header	Type	Required	Description
Content-Type	string	Yes	Always application/json
nonce	string	Yes	A unique random string per request (6–32 characters)
timestamp	string	Yes	Unix timestamp (seconds)
signature	string	Yes	Base64-encoded RSA signature (Signature Guide)

Request Body Parameters

Parameter	Type	Required	Description
merchantUserNo	string	Yes	The buyer's unique user ID in the merchant system
email	string	Yes	The buyer's email address
firstName	string	No	First name
lastName	string	No	Last name

Request Example

POST /pay-fac/MERCHANT001/v1/user HTTP/1.1
Host: www.igv.com
Content-Type: application/json
timestamp: 1743478725
nonce: a1b2c3
signature: dGhpcyBpcyBhIHNhbXBsZSBzaWduYXR1cmU=

{
  "merchantUserNo": "U1000001",
  "email": "[email protected]",
  "firstName": "John",
  "lastName": "Doe"
}

Response Parameters

Parameter	Type	Description
userId	string	The buyer's user ID in the iGV system
authorizationCode	string	One-time SSO authorization code

Success Response

{
  "code": "0000",
  "msg": "Success",
  "time": "2025-04-03 02:55:16",
  "data": {
    "userId": "1739298043323322369",
    "authorizationCode": "qScNfN7U6LfCeKADqmxW1fFbGdVLu0fY"
  }
}

Error Response

{
  "code": "10003",
  "msg": "Request signature error.",
  "time": "2025-04-03 02:55:16",
  "data": null
}

Using the Authorization Code

Append the authorizationCode as a URL query parameter to an iGV page URL to enable automatic SSO login for the buyer.

Example — Redirect to a product detail page:

https://www.igv.com/items/2001591587541073922?authorizationCode=qScNfN7U6LfCeKADqmxW1fFbGdVLu0fY

Note

• The authorization code is single-use and becomes invalid after use
• The authorization code has a short validity period; use it immediately after obtaining it
• Request a new code each time the buyer needs to log in or be redirected to an iGV page

Error Handling

Code	Description	Action
0000	Success	Use the authorizationCode from data
10001	URL parsing error	Check the merchant and ver parameters
10002	JSON parsing error	Check the request body format
10003	Signature verification failed	Check the signature algorithm and signature string
10004	Server error	Retry the request

For the full error code reference, see Error Codes.