White-label portal with custom domain and embedded checkout.
Magic link, password or SSO. Custom domain with automatic Let's Encrypt. 11 configurable sections. Multi-user per billing account.
Feature
100%
white-label
11
configurable sections
3
auth methods
Let's Encrypt
automatic SSL
Auth methods, choose per organization
Magic Link
Customer enters email, receives access link. Token expires in 15 minutes. No password to remember.
- Encrypted token (verificationToken)
- Origin validation
- Access logs
Password
Customer sets password on first access. bcrypt hash. Configurable complexity policy.
- Reset by email
- Failed login attempts tracked (auto-block)
- Force reset via API
SSO
Integration with the customer's platform SSO. External token via externalId in PortalUser.
- Skip password flow
- Identification via OAuth/SAML
- Automatic provisioning
2FA (optional)
TOTP via Google Authenticator, Authy, etc. Optional per user, mandatory per role.
- Standard TOTP
- Optional per user
- Configurable mandatory per role
What customers can do in the portal
Subscriptions
Plan, cycle, add-ons. Change, pause, cancel with proration preview.
Explore subscriptionsInvite a portal user via API
bash
curl -X POST https://api.billing.kobana.com.br/v1/customers/9e8d7c6b-5a49-4382-a1b0-c9d8e7f6a5b4/users/invite \
-H "Authorization: Bearer $KOBANA_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"email": "finance@customer.com"
}'response
{
"data": {
"id": "c2d3e4f5-a6b7-4c8d-9e0f-1a2b3c4d5e6f",
"email": "finance@customer.com",
"status": "pending_invitation",
"created_at": "2026-06-06T12:00:00.000Z"
}
}