Skip to content

Protocols and standards

Supported protocols and standards

StandardUse in Riversoft STCP DirectLink
HTTPSTransport for the portal, the API and the HTTP services.
REST / JSONAPI style and format (/directlink/v2).
HTTP BasicSign-in with user name and password (only on /auth/login).
OAuth 2.0 (password grant, can be disabled)Bearer token issuance on /auth/token and /oauth2/token.
OAuth 2.0 and 2.1 Token Exchange (RFC 8693)Exchange of a JWT from a trusted provider for a Bearer token.
OAuth 2.0 and 2.1 / OpenID Connect and SAML 2.0SSO with Google, Microsoft, Apple and corporate providers.
JWTBearer tokens issued by the service and source tokens in token exchange.
TOTPSecond factor (MFA) through an authenticator app.
multipart/form-dataUpload with metadata in form fields.
SSH/SFTP, FTP/FTPSFile transfer with partners.
AS2B2B document exchange with signing, encryption and MDN.
OpenTelemetry (OTLP)Export of traces, logs and metrics.

Integration services

Services receive the inbound connections. They are registered in the instance network services, in the Riversoft Console Portal, with address, port and TLS.

ServiceProtocolUse
DirectLink APIHTTP/HTTPSPortal, authentication, MFA, SSO, upload, download, secure links and reports. See Riversoft STCP DirectLink API.
SFTP DirectLinkSSH/SFTPThe partner connects to upload and download files. See SFTP.
AS2 DirectLinkAS2 over HTTP/HTTPSThe partner sends documents with signature, encryption and MDN. See AS2.
Webhook DirectLinkHTTP/HTTPSThe partner sends documents. See Webhook.
WhatsApp DirectLinkWhatsApp Business PlatformReceives the documents contacts send through WhatsApp. See WhatsApp.
DirectLink SupervisorSupervision interfaceAdministrative operation of the instance.

Connectors

Connectors make the outbound connections: Riversoft® STCP DirectLink connects to the partner or repository, by schedule or when the operator starts the connection. The connector, address, credentials and directories are in each user’s registration, in the Riversoft Console Portal.

ConnectorProtocolOperations and features
FTPFTP/FTPSSend and fetch; mask, temporary name, removal and backup after fetching, explicit or implicit FTPS and proxy. See FTP and FTPS.
SFTPSSH/SFTPSend and fetch; password or private key, server fingerprint, mask, temporary name, removal and backup after fetching and proxy. See SFTP.
Amazon S3S3 and compatibleSend and fetch; custom endpoint, access key, profile, AssumeRole and IAM Roles Anywhere. See Cloud storage.
Azure Blob StorageAzure Blob StorageSend and fetch; Shared Key or SAS token, containers and prefixes. See Cloud storage.
Google Cloud StorageGCSSend and fetch; service account JSON key or environment credentials, buckets and prefixes. See Cloud storage.
Oracle Cloud Object StorageOCISend and fetch; API key, region, buckets and prefixes. See Cloud storage.
AS2AS2Sending documents with signature, encryption and synchronous or asynchronous MDN, TLS and proxy. See AS2.
WebhookHTTP/HTTPSSending documents to the partner endpoint with authentication, signature, encryption, custom headers, TLS and proxy. See Webhook.
WhatsAppWhatsApp Business PlatformSending documents and secure links; file name in the <mobile>@<file-name> format. See WhatsApp.

Notifications

ComponentProtocolUse
EmailSMTPSign-in, first access, password recovery, PIN, file availability and transfer confirmation.
eSafer, Twilio, ZenviaProvider APISMS.
ZendeskProvider APIMessages and templates.
WhatsAppWhatsApp Business APITemplates, media, links, buttons and PIN.
BitlyProvider APILink shortening.

The email, SMS and shortener parameters are in Configuration.

Integration with Riversoft STCP

Riversoft STCP DirectLink works integrated with Riversoft STCP Gemini Server (Linux) or Riversoft STCP Enterprise Server (Windows), which provide the users, credentials, directories, services and connector configuration.