Nonce API

Generates a Nonce time to start Alignet One Flex at the front.
That value should be requested from backend using a Bearer Token valid.

Endpoint

endpoint

production

https://auth.preprod.alignet.io/nonce

Production

https://auth.alignet.io/nonce

Before calling this endpoint, it generates a Access Token with Authentication. The token should be sent to the head Authorization.

Required range

Define permission associated with nonce.

post: charges

Retirement Flex to create jobs and authorizations.

Bearer Token

The token sent at Authorization have been valid and have been authorized to apply for this permission.

Request

Leaders

Field	Description	Value	Type	Mandatory
`Content-Type`	Request format	`application/json`	String	If
`ALG-API-VERSION`	Version API	`1709847567`	String	If
`Authorization`	Authentication Token	`Bearer {access_token}`	String	If

Content-Type: application/json
ALG-API-VERSION: 1709847567
Authorization: Bearer {access_token}

Body

Field	Description	Example	Type	Mandatory
`action`	Action to be implemented	`create.nonce`	String	If
`audience`	URL and API by environment	`https://api.preprod.alignet.io/`	String	If
`client_id`	Public Merchant Identifier	`your_client_id`	String	If
`scope`	Permission requested for nonce	`post:charges`	String	If

The value of audience have to coincide with the environment that you will use to allow payment: https://api.preprod.alignet.io/ production or production https://api.alignet.io/ for production.

Example (JSON)

{
  "action": "create.nonce",
  "audience": "https://api.preprod.alignet.io/",
  "client_id": "your_client_id",
  "scope": "post:charges"
}

Example (cURL)

curl --request POST 'https://auth.preprod.alignet.io/nonce' \
  --header 'Content-Type: application/json' \
  --header 'ALG-API-VERSION: 1709847567' \
  --header 'Authorization: Bearer {access_token}' \
  --data '{
    "action": "create.nonce",
    "audience": "https://api.preprod.alignet.io/",
    "client_id": "your_client_id",
    "scope": "post:charges"
  }'

Answer

Body

Field	Description	Type
`action`	Action implemented	String
`success`	Result of operation	Boolean
`nonce`	Temporary code for initializing Flex	String
`scope`	Permission associated with nonce	String
`expires_in`	Operating time in seconds	Inseg
`nonce_creation`	Retirement	Object
`nonce_creation.meta.status.code`	Internal result code	String
`nonce_creation.meta.status.message_ilgn[].locale`	Language of message	String
`nonce_creation.meta.status.message_ilgn[].value`	Message from the result	String

Example (JSON)

{
  "action": "create.nonce",
  "success": true,
  "nonce": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9...",
  "scope": "post:charges",
  "expires_in": 30,
  "nonce_creation": {
    "meta": {
      "status": {
        "code": "00",
        "message_ilgn": [
          {
            "locale": "es_PE",
            "value": "Código Nonce creado"
          }
        ]
      }
    }
  }
}

Using Nonce in Flex

After receiving nonce, send them to the front and select them at the initiation of the component with the payload.

var paymentForm = new FlexPaymentForms({
    nonce,
    payload,
    settings: {
        display_result_screen: true,
        show_close_button: true,
        show_border: false,
        show_operation_number: true
    },
    display_settings: {
        methods: ["QR", "BANK_TRANSFER", "CARD"]
    },
    i18n: {
        mode: "multi",
        default_language: "es",
        languages: ["es", "en"]
    }
});

Recommended flow

Generates Access Token

To be API Security from backend.

Requests Nonce

Send action, audience, client_id and scope at endpoint POST /nonce.

Initiates Flex

Use nonce in FlexPaymentForms with payload and payment.

Valids result

Confirms the operation from backend using notifications or API Consultation.

good practice

Requests nonce from backend.
Use the same environment for auth, audiencebookstores Flex and apis paid.
Don’t explain client_id, tokens or sensitive metadata in public login.
Generates a new nonce if the previous expires before initiation Flex.
Control reattempts to avoid multiple unnecessary applications.

Common errors

400 Bad Request

The body’s incomplete, action and / or audience That’s bad.

401 Unauthorized

The Bearer Token did not have been sent, expired or have an incorrect format.

403 Forbidden

The token does not have the necessary scope to apply for nonce.

5xx Error

A temporary misservice happened. Retry with a controlled backend.

The nonce does not replace backend validation of the result. After response from Flexconfirm the status of operation with your backend.

Next step

Include library and basic styles

It continues with the inclusion of CSS and JS of the environment before starting the form.

Getting started

Integration

Payments

Endpoint

production

Production

Required range

post: charges

Bearer Token

Request

Leaders

Body

Example (JSON)

Example (cURL)

Answer

Body

Example (JSON)

Using Nonce in Flex

Recommended flow

good practice

Common errors

400 Bad Request

401 Unauthorized

403 Forbidden

5xx Error

Next step

Include library and basic styles

​Endpoint

production

Production

​Required range

post: charges

Bearer Token

​Request

​Leaders

​Body

​Example (JSON)

​Example (cURL)

​Answer

​Body

​Example (JSON)

​Using Nonce in Flex

​Recommended flow

​good practice

​Common errors

400 Bad Request

401 Unauthorized

403 Forbidden

5xx Error

​Next step

Include library and basic styles

Endpoint

Required range

Request

Leaders

Body

Example (JSON)

Example (cURL)

Answer

Body

Example (JSON)

Using Nonce in Flex

Recommended flow

good practice

Common errors

Next step