Create Session | INFONITE

Initialize a Spain Public Administration flow session to access government portals and retrieve public records.

This endpoint starts the flow lifecycle. Upon successful creation, it returns a session_id and a widget_url. Your frontend application must redirect the customer to the widget_url so they can log in and sign the consent form.

Once the customer completes the widget journey, a webhook notification is delivered (if configured), and the decrypted results can be downloaded using the Get Session Results endpoint.

This endpoint needs to be executed with an app secret, so should always be used in server side without exposing the secret to customers.

Initialize a Spain Public Administration flow session to access government portals and retrieve public records. This endpoint starts the flow lifecycle. Upon successful creation, it returns a `session_id` and a `widget_url`. Your frontend application must redirect the customer to the `widget_url` so they can log in and sign the consent form. Once the customer completes the widget journey, a webhook notification is delivered (if configured), and the decrypted results can be downloaded using the [Get Session Results](api:GET/es-public-administration/v1/manager/{session_id}/results) endpoint. > This endpoint needs to be executed with an app secret, so should always be used in server side without exposing the secret to customers.

Authentication

X-APP-SECRETstring

Application Secret

Request

This endpoint expects an object.

customer_idstringRequired1-64 characters

The external identifier of the customer in your system. Used for auditing and tracking.

settingsobjectRequired

Custom session settings containing requested features, redirection URLs, and webhook extra parameters.

date_limitstringOptionalformat: "datetime"

Custom expiration deadline for this session. After this timestamp, the widget cannot be opened.

fixed_parametersobjectOptional

Restricted credentials/parameters to enforce during user login in the widget.

Response

200 OK
Flow Session created successfully

session_idstringformat: "ObjectId"

The unique database identifier of the created flow session.

widget_urlstring

The secure redirection URL where the customer should be sent to open the widget.

session_tokenstring

Temporary security token scoped for the widget to interact with backend services during the session.

Errors

409

Conflict Error

422

Unprocessable Entity Error

$	curl -X POST https://widgets.infonite.tech/api/flows/es-public-administration/v1/manager/init \
>	-H "X-APP-SECRET: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"customer_id": "cust_esp_202406",
>	"settings": {
>	"sandbox": true
>	}
>	}'

1	{
2	"session_id": "644599da47847b79c03cc94f",
3	"widget_url": "https://widgets.infonite.tech/session/644599da47847b79c03cc94f/start",
4	"session_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiI2NDQ1OTlkYTQ3ODQ3Yjc5YzAzY2M5NGYiLCJpYXQiOjE2ODU2MjQwMDB9.4f3b2a1c9d8e7f6a5b4c3d2e1f0a9b8c"
5	}