gFinOS OAuth 2.1

Discovery

Standard OpenID / OAuth 2.1 metadata is served by the Cloud Auth issuer.

GET https://<project>.supabase.co/auth/v1/.well-known/oauth-authorization-server

Consent

Users approve access on this app at:

https://gfinos.app/.lovable/oauth/consent?authorization_id=...

Scopes

• openid — user id
• profile — display name, account number
• email — email address
• wallet.read — balances
• wallet.write — send money, top up, pay
• transactions.read — history
• cards.write — issue and manage virtual cards

Calling the API

Use the bearer token returned by the token endpoint. The SDK handles the flow:

npm install @efinos/sdk

import { EfinOSClient } from "@efinos/sdk";
const client = new EfinOSClient({ accessToken });
const wallet = await client.wallet.get();
await client.payments.pay({ to: "421905873441", amount: 25.00, currency: "USD" });