Proprietary

Global Pet Owner Application Platform

MSD Solutiones - Authentication

IT Contact
Nanda Ramachandran
Global IT Product Owner – Global Pet Owner Platforms
Email: nandakumar.ramachandran@merck.com

AH IT Commercial Value Team Oct 2, 2023

Proprietary

App Authentication with Pet Owner Platform – Click&Vet

Flow Diagram

AH IT Commercial Value Team Oct 2, 2023 2

Proprietary

Step 0

How to generate Authentication Token?

Step 1: Request for an Authentication Credentials by sending an email to gpoapp_dev_dl@merck.com –

Already provided below the default values. No need to request again for Dev platform.
Step 2: Once provided use the Authentication credentials to request for a TOKEN using below API call

API URL: https://www.popms-devapi-eu.net/pet-owner-platform/v1/dev/2-2v1/petownerlogin

Environment: Development

The Input Json will have to be encrypted using the Public SSL key from the above www.popms-devapi-eu.net domain
and OPENSSL_PKCS1_PADDING algorithm should be used. The encrypted base64 string must be sent as described
below.

Before Encrption Json:

{
"APP_PLATFORM_ID": "MSDSOL_DEV_ES", // ID For MSD Solutiones - required
"LOGIN_NAME": "App-Dev-MSDSOL", // Login name for MSD Solutiones - required
"GROUP_CODE": "Vet", // Code for MSD Solutiones - required
"OWNER_ACCOUNT_ID": "MSDSOL2023-Vet-DEV-APP", // App ID - required
"LOGIN_FLAG":"A", // Default - reqiured
"PWD_STRING": "JNp5AemfFp3G" // Default for your WP Platform - required
}

After Encrption Json: Sample only

{
"AUTH_STRING":
"VruJbRw+VsHoORu4bJi0WJ4did1ncNsAqrx7I72NjyJyIxad3cG3VAhnT/APQwgzzMDJ0MXl3akeWmpaaAVg6
lmmAErtYT0kvFrt9199SKYOXeInySuZ9J2PTnd5f8fqmYO7YU4BYAD/aq/q4SzuSUuIymafk1t+1dhLxqCh3q1
9UDlZ7KCWmQmb9INxN7b5oJ6qKLFm7euBhjCoK0FEF0qpS8A/S2UvKAPRO8052AwUX/YK1CFAdeVU2RhIzr+dA
SCan+nAOltV9urFkLIniXDdiiqbIU6n0pw6XzogW2O7lA0hwNTw+4h64nGE2vPp7cCIgPzKu+xAHk66FW7Dpg=
="
}

AH IT Commercial Value Team Oct 2, 2023 3

Proprietary

Response Json: Sample only

{
"DATA": {
"TOKEN":
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InJvbnkzIiwibmJmIjoxNjk2MDM1MjU2LCJleHAi
OjE2OTYxMjE2NTYsImlhdCI6MTY5NjAzNTI1NiwiaXNzIjoibWVyY2suY29tIiwiYXVkIjoid29yZHByZXNzIn
0.821eFP50ZMvtmXDnwPlPmPUp3OchbsTZXus-gGHc0mE",
"EXPIRY": "2023-10-01T00:54:16.0446671Z"
},
"DATA_TYPE": "OBJECT",
"RESPONSE_STATUS_CD": "S",
"RESPONSE_DESCRIPTION": "Success"
}

Step 1

Vet professional login into MSD Solutiones portal as usual by validating with MAXX LFW flow.

Step 2

From MSD Solutiones dashboard, qualified Vets able to see and click a link / button to reach Click&Vet
portal. When they do, the next step is to call ‘vetlogin’ API as below.

Request Json:
{
"APP_PLATFORM_ID": "CV_POPDEV_ES", //Required
"MAXX_VET_ID": "0014U00002vJIjAQAW", //Required
"ACCOUNT_FIRST_NM": "ANA FERNANDEZ LEON", //Required
"ACCOUNT_LAST_NM": "FERNANDEZ LEON", // Required
"EMAIL_ADDR": "test@test.com"
}

Response Json: Sample only

{
"DATA": {

"CONFIRMATION_URL":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InJvbnkzIiwibmJmIjoxNjk1NjU4OTUxLCJle
HAiOjE2OTU3NDUzNTEsImlhdCI6MTY5NTY1ODk1MSwiaXNzIjoibWVyY2suY29tIiwiYXVkIjoid29yZHByZXNzIn0.PcS8xX
Pm_QrbrftgrdvOXdjGAK_9vQHnVE2f7hLAa5w"
},
"DATA_TYPE": "OBJECT",
"RESPONSE_STATUS_CD": "S",
"RESPONSE_DESCRIPTION": "Success"
}

AH IT Commercial Value Team Oct 2, 2023 4

Proprietary

Step 3

Once getting the CONFIRMATION_URL value from Step 2, from MSD Solutiones, call the below URL to
get the Vet authenticated for Click&Vet. This will establish the session with Click&Vet which will be set to
expire within 15 minutes of inactivity. This value can be changed to decrease, or increase based on the
business use case later.

https://click-and-vet-com.dev.mah-branding.wpcust.com/pet-owner-portal/pet-owner-
confirmation?CONFIRMATION_URL=6e3ced36-8854-40f6-905c-
32e040de4d47&APP_PLATFORM_ID=CV_POPDEV_ES

API Testing

All API calls need to send the following Header parameters:

• Key = X-Merck-APIKey, Value = yH7a6Gzqz7BPI1KWV5A9T9WbJ1GpHGzM
• Key = sessionId, Value = Front-end user session id
• Key = userId, Value = Front-end user id
• Key=token, Value = Authorization Token from Authentication call

** Both sessionId and userId will be returned with the same values given in the Response header to map on
the front-end side so the data doesn’t get sent to wrong front-end session.

AH IT Commercial Value Team Oct 2, 2023 5