Flow responsibilities
Backend
Generates tokens, issues the
nonce, validates final statuses, and updates orders.Frontend
Initializes Flex, displays checkout, and handles callbacks to improve the user experience.
Security
Nonce and tokens
Nonce and tokens
- Generate the
Access Tokenandnoncefrom the backend. - Do not expose credentials or tokens in JavaScript, HTML, logs, or analytics.
- Renew temporary credentials when they expire.
Callbacks
Callbacks
- Use
responseCallbackfor user experience. - Use
trackingCallbackfor flow traceability. - Use
onErrorCallbackfor controlled messages and support.
Asynchronous methods
Asynchronous methods
- For QR, Cuotéalo, or PagoEfectivo, confirm the result through a query or notification.
- Handle pending, expired, and declined statuses.
- Avoid duplicating orders when customers retry.
Recommended UX
- Show clear messages for approved, declined, pending, or canceled payments.
- Keep the operation number available for support.
- Validate Flex on desktop and mobile devices.
- Test the language, close button, and visible payment methods before production.
Integration checklist
Check the Checklist dedicated to Web Checkout.

