Session Details - Flinks Documentation

Get EFT Session Details

curl --request GET \
  --url https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "sessionId": "850750a4-3021-4061-ac03-a8d873aa4179",
  "status": "Completed",
  "step": {
    "current": "Complete",
    "aggregationRequestId": "c1a2b3d4-e5f6-7890-abcd-ef1234567890",
    "padId": "d4c3b2a1-f6e5-0987-dcba-fe7654321098"
  },
  "referenceId": "USER12345",
  "amount": 100,
  "type": "EFT",
  "direction": "DEBIT",
  "currency": "CAD",
  "options": {
    "guarantee": {
      "enable": false
    },
    "showConsentScreen": false,
    "limits": {
      "minimumAmount": 50,
      "maximumAmount": 10000
    },
    "amountModification": true,
    "redirectPreferences": {
      "mode": "JsEvents"
    }
  },
  "payor": {
    "email": "sara.ahmad@example.com",
    "firstName": "Sara",
    "lastName": "Ahmad",
    "account": {
      "institutionCode": "003",
      "transitNumber": "12345",
      "accountNumber": "****1234",
      "accountLabel": "Checking (****1234)"
    },
    "address": {
      "addressLine1": "123 Street",
      "city": "Toronto",
      "province": "ON",
      "country": "CA",
      "postalCode": "M5H2N2"
    }
  },
  "userDetails": {
    "matchingPerformed": true,
    "nameMatch": 95
  },
  "createdAt": "2026-06-04T14:30:00Z"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

GET

api

sessions

{sessionId}

details

Get EFT Session Details

curl --request GET \
  --url https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://www.{baseurl}.com/api/v2/sessions/{sessionId}/details")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "sessionId": "850750a4-3021-4061-ac03-a8d873aa4179",
  "status": "Completed",
  "step": {
    "current": "Complete",
    "aggregationRequestId": "c1a2b3d4-e5f6-7890-abcd-ef1234567890",
    "padId": "d4c3b2a1-f6e5-0987-dcba-fe7654321098"
  },
  "referenceId": "USER12345",
  "amount": 100,
  "type": "EFT",
  "direction": "DEBIT",
  "currency": "CAD",
  "options": {
    "guarantee": {
      "enable": false
    },
    "showConsentScreen": false,
    "limits": {
      "minimumAmount": 50,
      "maximumAmount": 10000
    },
    "amountModification": true,
    "redirectPreferences": {
      "mode": "JsEvents"
    }
  },
  "payor": {
    "email": "sara.ahmad@example.com",
    "firstName": "Sara",
    "lastName": "Ahmad",
    "account": {
      "institutionCode": "003",
      "transitNumber": "12345",
      "accountNumber": "****1234",
      "accountLabel": "Checking (****1234)"
    },
    "address": {
      "addressLine1": "123 Street",
      "city": "Toronto",
      "province": "ON",
      "country": "CA",
      "postalCode": "M5H2N2"
    }
  },
  "userDetails": {
    "matchingPerformed": true,
    "nameMatch": 95
  },
  "createdAt": "2026-06-04T14:30:00Z"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

{
  "type": "https://tools.ietf.org/html/rfc7231#section-6.5.1",
  "title": "Bad Request",
  "status": 400,
  "detail": "<string>",
  "instance": "<string>"
}

Retrieve comprehensive session information including verified payor account details. To successfully call this endpoint, you must have a valid access token from the /Authorize endpoint.

Get Session Details

Use this endpoint to retrieve full, verified payor account information along with all session-level details required for payment validation.

Availability of Account Details

Important: Payor account details become available only after the session has passed the “Initiated” stage. Before that point, the payor account section will be returned empty. This endpoint provides:

Complete session information: All details from session creation
Verified account details: Bank account information after user authentication
Payment validation data: Information needed for transaction processing
Identity verification results: User identity matching status

Request Example

curl --location '{{BaseUri}}/api/v2/sessions/{{sessionId}}/details' \
--header 'Authorization: Bearer {{access_token}}'

Response Structure

The response includes comprehensive session information and, once available, detailed payor account verification data:

{
  "sessionId": "aadd08f2-83ce-456d-84ed-c68cfed4ee7b",
  "status": "Completed",
  "step": {
    "current": "Complete",
    "aggregationRequestId": "c1a2b3d4-e5f6-7890-abcd-ef1234567890",
    "padId": "d4c3b2a1-f6e5-0987-dcba-fe7654321098"
  },
  "referenceId": "USER12345",
  "amount": 500.00,
  "type": "EFT",
  "direction": "DEBIT",
  "currency": "CAD",
  "options": {
    "guarantee": {
      "enable": true
    },
    "showConsentScreen": true,
    "limits": {
      "minimumAmount": 10,
      "maximumAmount": 1000
    }
  },
  "payor": {
    "email": "john.smith@example.com",
    "firstName": "John",
    "lastName": "Smith",
    "account": {
      "institutionCode": "014",
      "transitNumber": "58964",
      "accountNumber": "1234567",
      "accountLabel": "Account (****4567)"
    },
    "address": {
      "addressLine1": "123 Main Street",
      "city": "Toronto",
      "province": "ON",
      "country": "CA",
      "postalCode": "M5V3A8"
    }
  },
  "payee": {
    "account": {
      "institutionCode": "999",
      "transitNumber": "30265",
      "accountNumber": "9876541",
      "accountLabel": "Settlement Account"
    }
  },
  "guaranteeDetails": {
    "guaranteeOffered": true,
    "guaranteeAccepted": true,
    "highestDebitAmountToGuarantee": 500.00,
    "overallRiskLevel": "Low",
    "transactionRiskLevel": "Low",
    "userRiskLevel": "Low",
    "otherRiskLevel": "Unknown",
    "guaranteedEftType": "Full"
  },
  "userDetails": {
    "matchingPerformed": true,
    "nameMatch": 95
  }
}

Response Fields

Session Information

sessionId: Unique session identifier
status: Current session status
step: Current step of the session flow, an object with current, aggregationRequestId, and padId. Possible current values:
- Start: session opened; user has entered the flow
- Consent: Flinks consent screen (when showConsentScreen is enabled)
- BankSelection: user is choosing their financial institution
- BankConnection: user is logging into / connecting their bank
- AccountSelection: user is selecting which account to use
- AmountSelection: user is entering the amount (skipped when amount is preset)
- GuaranteeOffer: guarantee offer presented to the user
- Review: user reviews the payment details
- Pad: user reviews and signs the PAD agreement
- Complete: flow finished
referenceId: Your internal reference ID
amount: Payment amount (null if not yet set)
type: Payment type (always “EFT” for GEFT)
direction: Payment direction (always “DEBIT” for GEFT)
currency: Payment currency (always “CAD”)

Options

guarantee.enable: Whether a guarantee was requested
notificationPreferences.language: Language preference (“EN” or “FR”)
showConsentScreen: Whether Flinks consent screen is displayed
limits: Minimum and maximum allowed payment amounts
amountModification: Whether the user can modify the amount
redirectPreferences: Redirect mode and URLs for session completion

Payor Information

Personal details: Name (firstName, lastName, middleName), email as provided during session creation
Verified account: Bank account information obtained after user authentication (institutionCode, transitNumber, accountNumber, accountLabel, availableBalance)
Address: Street address, city, province, country, postal code

Payee Information

Account details: Destination account information (institutionCode, transitNumber, accountNumber, accountLabel)

Guarantee Details

guaranteeOffered: Whether a guarantee was offered
guaranteeAccepted: Whether the guarantee was accepted (null if not yet decided)
highestDebitAmountToGuarantee: Maximum debit amount eligible for guarantee
Risk levels: overallRiskLevel, transactionRiskLevel, userRiskLevel, otherRiskLevel (Unknown, Low, Medium, High)
guaranteedEftType: Type of guarantee coverage (Full, Partial, Minimal)

User Details

matchingPerformed: Whether identity matching was performed
nameMatch: Name matching score (0 to 100)

Data Availability Timeline

Before User Authentication (Status: Initiated)

{
  "sessionId": "aadd08f2-83ce-456d-84ed-c68cfed4ee7b",
  "status": "Initiated",
  "referenceId": "USER12345",
  "type": "EFT",
  "direction": "DEBIT",
  "currency": "CAD",
  "payor": {
    "email": "john.smith@example.com",
    "firstName": "John",
    "lastName": "Smith",
    "account": null
  }
}

After User Authentication (Status: Completed/Failed)

{
  "sessionId": "aadd08f2-83ce-456d-84ed-c68cfed4ee7b",
  "status": "Completed",
  "payor": {
    "email": "john.smith@example.com",
    "firstName": "John",
    "lastName": "Smith",
    "account": {
      "institutionCode": "003",
      "transitNumber": "12345",
      "accountNumber": "****1234",
      "accountLabel": "Checking (****1234)"
    }
  }
}

Use Cases

Payment Validation

Verify user identity matches bank account holder
Confirm account details for reconciliation
Validate guarantee status before processing

Audit and Compliance

Complete transaction trail for regulatory requirements
Identity verification documentation
Account verification records

Customer Support

Comprehensive session information for issue resolution
Account details for payment troubleshooting
Complete payment history and status

Reconciliation

Match payments to internal records using referenceId
Account details for settlement verification
Complete payment lifecycle information

Error Responses

Session Not Found

{
  "error": "not_found",
  "error_description": "Session not found"
}

Authentication Required

{
  "error": "unauthorized",
  "error_description": "Valid access token required"
}

Insufficient Permissions

{
  "error": "forbidden",
  "error_description": "Access denied to session details"
}

Security Considerations

Data Protection

Account numbers: Masked for security (showing only last 4 digits)
Personal information: Handle according to privacy regulations
Access controls: Ensure proper authentication and authorization

Compliance

Data retention: Follow regulatory requirements for payment data
Audit trails: Maintain complete records for compliance
Privacy: Protect customer personal and financial information

Best Practices

When to Call This Endpoint

After status changes: When polling shows status updates
For reconciliation: During end-of-day processing
For support: When investigating payment issues
For compliance: When audit trails are required

Data Handling

Cache appropriately: Avoid excessive API calls
Secure storage: Protect sensitive account information
Access logging: Log all access to session details

Status Values

The status field reflects the session’s progress. Retrieve this endpoint until the session reaches a terminal state (Completed, Failed, Canceled, or Expired).

Status	Description
`Initiated`	🟡 Session created; the user has not yet completed the flow
`Completed`	🟢 Session completed
`Failed`	🔴 Session failed
`Canceled`	⚫ Session canceled by API request
`Expired`	⚫ Session timed out - user inactive or did not complete

Create Session - Initialize GEFT payment session
Cancel Session - Terminate active session

Authorizations

Authorization

string

header

required

Bearer token obtained from the /api/v1/authorize endpoint.

Headers

Authorization

string

required

Bearer token received from the /authorize endpoint.

Pattern: ^Bearer .+

Path Parameters

sessionId

string<uuid>

required

The session identifier returned when the session was created.

Response

Session details retrieved successfully

sessionId

string<uuid>

Example:

"850750a4-3021-4061-ac03-a8d873aa4179"

status

enum<string>

Current session status.

Available options:

Initiated,

Failed,

Cancelled,

Expired,

Completed

step

object

Show child attributes

referenceId

string | null

Example:

"USER12345"

amount

number<double> | null

Example:

100

type

enum<string>

Available options:

EFT

Example:

"EFT"

direction

enum<string>

Available options:

DEBIT

Example:

"DEBIT"

currency

enum<string>

Available options:

CAD

Example:

"CAD"

options

object

Show child attributes

payor

object

Show child attributes

payee

object | null

Always null for EFT. Funds settle to your configured account.

Show child attributes

userDetails

object

Show child attributes

schedule

object

Show child attributes

createdAt

string<date-time>

Example:

"2026-06-04T14:30:00Z"

Initiate Session

Confirm Guarantee

⌘I

​Get Session Details

​Availability of Account Details

​Request Example

​Response Structure

​Response Fields

​Session Information

​Options

​Payor Information

​Payee Information

​Guarantee Details

​User Details

​Data Availability Timeline

​Before User Authentication (Status: Initiated)

​After User Authentication (Status: Completed/Failed)

​Use Cases

​Payment Validation

​Audit and Compliance

​Customer Support

​Reconciliation

​Error Responses

​Session Not Found

​Authentication Required

​Insufficient Permissions

​Security Considerations

​Data Protection

​Compliance

​Best Practices

​When to Call This Endpoint

​Data Handling

​Status Values

​Related Endpoints

Authorizations

Headers

Path Parameters

Response

Get Session Details

Availability of Account Details

Request Example

Response Structure

Response Fields

Session Information

Options

Payor Information

Payee Information

Guarantee Details

User Details

Data Availability Timeline

Before User Authentication (Status: Initiated)

After User Authentication (Status: Completed/Failed)

Use Cases

Payment Validation

Audit and Compliance

Customer Support

Reconciliation

Error Responses

Session Not Found

Authentication Required

Insufficient Permissions

Security Considerations

Data Protection

Compliance

Best Practices

When to Call This Endpoint

Data Handling

Status Values

Related Endpoints