Skip to content

One Time Token

One-time tokens are temporary authentication sessions used to track SCA challenges. When an SCA-protected endpoint is called, a one-time token is returned containing the challenges that must be completed.

Please read the SCA over API guide to understand how SCA integration works.

Schemas
Operations

One-Time Token

A one-time token is generated when accessing an endpoint secured by SCA. This token includes a list of all available challenges to complete.

You can use the OTT status endpoint to view challenges and their statuses, or use create SCA session to manually trigger SCA and return a one-time token.

oneTimeTokenstring, (uuid)

A one-time token unique identifier.

Example:"5932d5b5-ec13-452f-8688-308feade7834"
challengesArray of objects

An array of challenges.

validityinteger

The One-Time Token expiration in seconds.

Example:3600
{
  "oneTimeToken": "5932d5b5-ec13-452f-8688-308feade7834",
  "challenges": [
    {
      "primaryChallenge": { … },
      "passed": false
    }
  ],
  "validity": 3600
}