MoMo Mini App Open API
The M_Service Open Platform server-to-server API used by Mini Apps embedded in the MoMo app. Exchange a user authorisation code for a short-lived access token, read the user profile fields the user consented to share, and push notifications into the MoMo app. Requests carry an OAuth 2.0-style bearer JWT plus an OP-Signature (SHA256withRSA over data + M-Timestamp + openSecretKey) and optional AES payload encryption under an RSA-wrapped symmetric key.