Master Zoho Payments Testing with APIDog: A Developer's Guide

💳 Master Zoho Payments Testing with APIDog — A Complete OAuth + API Workflow Guide

Integrating a payment gateway like Zoho Payments can feel overwhelming—especially when OAuth authentication and webhook handling come into play.

In this guide, you’ll learn how to:

✅ Register your Zoho OAuth client properly

✅ Generate access & refresh tokens step-by-step

✅ Test Zoho Payments APIs smoothly using APIDog

✅ Validate webhooks before touching production code

By the end, you’ll have a fully tested payment flow with zero guesswork — perfect for building reliable fintech features.

🚀 Why Use APIDog for Zoho Payments?

While tools like Postman can send requests, APIDog gives you a full API lifecycle workspace, which is ideal for sensitive payment integrations.

Key Benefits:

🔁 Design + Test + Document in one place

🧪 Mock payment responses (success/failure flows)

🤖 Automated API testing

📄 Auto-generated code snippets (Node.js, Python, Go, etc.)

This lets you focus on business logic instead of debugging chaos.

✅ Prerequisites

Before starting, make sure you have:

A Zoho Payments sandbox or test organization

APIDog installed

Access to Zoho Developer Console

🔐 OAuth Setup for Zoho Payments (Complete Flow)

This is a one-time setup that gives your app secure access to Zoho APIs.

⚠️ Only Account Owners or Admins in Zoho Payments can generate OAuth tokens.

🧾 Step 1: Register a New OAuth Client

Go to Zoho Developer Console

Ensure the client type in the URL is set to ORG

Enter:

Parameter	Description
Client Name	Name of your application
Homepage URL	Your website or app homepage
Authorized Redirect URI	Callback URL after authorization

Click CREATE

🎉 You’ll now receive:

Client ID

Client Secret

👉 Keep these secure — never expose them publicly.

🔑 Step 2: Generate Authorization Code

Create a GET request in your browser:


https://accounts.zoho.in/oauth/v2/org/auth?

Required Parameters:

Parameter	Description
scope	Permissions like ZohoPay.payments.CREATE, READ, UPDATE
client_id	From Developer Console
soid	Format: zohopay.{account_id}
response_type	code
redirect_uri	Same as registered
state	Random string
access_type	online or offline

Example:


https://accounts.zoho.in/oauth/v2/org/auth?scope=ZohoPay.payments.CREATE,ZohoPay.payments.READ&client_id=1005xxx&soid=zohopay.8xxxx&response_type=code&redirect_uri=https://www.premium.tempusmail.com/&access_type=offline

✔ Click ACCEPT to grant access.

You’ll be redirected with:


?code=AUTHORIZATION_CODE

🔄 Step 3: Generate Access & Refresh Tokens

Now make a POST request:


https://accounts.zoho.in/oauth/v2/token?

Parameters:

Parameter	Value
code	Authorization code
client_id	Your client ID
client_secret	Your secret
redirect_uri	Same callback URL
grant_type	authorization_code

You’ll receive:

🔐 access_token (valid ~1 hour)

♻️ refresh_token (long-lived)

🔁 Step 4: Refresh Expired Access Tokens

When access token expires:


https://accounts.zoho.in/oauth/v2/token?

Parameters:

Parameter	Value
refresh_token	From previous step
client_id	Your client ID
client_secret	Your secret
grant_type	refresh_token

✅ New access token generated instantly.

🚫 Revoke a Refresh Token (If Needed)


https://accounts.zoho.in/oauth/v2/token/revoke?

Parameter	Value
token	refresh_token

🧪 Testing Zoho Payments APIs in APIDog

Once authenticated, store your token as a global environment variable:


access_token = your_token_here

🔗 Example: Create Payment Link

Method:

POST

URL:


{{base_url}}/hostedpages

Headers:


Authorization: Zoho-oauthtoken {{access_token}}
X-com-zoho-subscriptions-organizationid: {{org_id}}

Body:


{
"customer_id":"9000000000000",
"plan":{
"plan_code":"premium-monthly",
"price":2900
}
}

🎯 Response returns hosted payment page URL.

🔔 Webhook Testing (Highly Recommended)

In APIDog you can:

✔ Define webhook schemas

✔ Simulate payment success/failure

✔ Validate real payload structure

This ensures your backend never breaks when real money flows in.

🎉 Final Thoughts

By combining Zoho Payments OAuth with APIDog’s testing power, you get:

✅ Secure authentication

✅ Fully tested payment flows

✅ Zero production surprises

✅ Faster development

Once verified, export API-ready code and plug it directly into your application.