Skip to main content

Initiating a Cardholder Session

When taking advantage of the numo White Label UI, it is necessary to authenticate the end user (customer) with numo in order for the platform to provide adequate targeting & personalization, and to track offer activations.

As a Publisher you will have to implement the following flow to be executed when a customer is passed to the numo White Label UI.

Step 1 - Requesting a partner token​

You will have to request a numo Partner Token using the specific client_id and client_secret provided by numo.

You can obtain a numo Partner Token by making a x-www-form-urlencoded POST request to either:

The complete procedure is detailed in the Getting Started > Step 1: Authentication

Step 2 - Initiate a user Session​

After obtaining the numo Partner Token, you will have to create a JWT session token specific to the user. You can obtain the User Session Token by making a POST request to either:

curl --location 'https://ui-api.partners.sandbox.tripleup.dev/initiate-session

' \
--header 'Authorization: Bearer my_triple_partner_token' \
--header 'Content-Type: application/json' \
--data '{
    "card_account_id": "triple'\''s card_account_id",
    "token_expiry_duration": 60, 
    "default_postal_code": "90210" 
}'

You can also iniate a session using a combination of external_card_account_id and external_card_program_id

curl --location 'https://ui-api.partners.sandbox.tripleup.dev/initiate-session

' \
--header 'Authorization: Bearer my_triple_partner_token' \
--header 'Content-Type: application/json' \
--data '{
    "card_account_external_id": "the publisher-set card account id",
    "card_program_external_id": "the publisher-set card program id",
    "token_expiry_duration": 60, 
    "default_postal_code": "90210" 
}'
info

Optional properties:

  • token_expiry_duration: Duration the user session token is valid for. The default and maximum value is 60 minutes
  • default_postal_code: The postal code to use for offers localization if location services are unavailable/not granted

The response will include a session token as well as properly formatter redirect URLs.

{
    "baseUrl": "https://{my_custom_domain}.rewards.tripleup.dev",
    "redirectUrl": "https://{my_custom_domain}.rewards.tripleup.dev?token={token}",
    "redirectUrl2": "https://{my_custom_domain}.merchant-rewards.com?token={token}",
    "token": "{JWT_token}"
}