Create Hosted Fields session | Payroc

Use this method to create a Hosted Fields session token. You need to generate a new session token each time you load Hosted Fields on a webpage.

In your request, you need to indicate whether the merchant is using Hosted Fields to run a sale, save payment details, or update saved payment details.

In the response, our gateway returns the session token and the time that it expires. You need the session token when you configure the JavaScript for Hosted Fields.

For more information about adding Hosted Fields to a webpage, go to Hosted Fields.

Use this method to create a Hosted Fields session token. You need to generate a new session token each time you load Hosted Fields on a webpage. In your request, you need to indicate whether the merchant is using Hosted Fields to run a sale, save payment details, or update saved payment details. In the response, our gateway returns the session token and the time that it expires. You need the session token when you configure the JavaScript for Hosted Fields. For more information about adding Hosted Fields to a webpage, go to [Hosted Fields](https://docs.payroc.com/guides/take-payments/hosted-fields).

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

processingTerminalIdstringRequired4-50 characters

Unique identifier that we assigned to the terminal.

Request

This endpoint expects an object.

libVersionstringRequiredformat: "^\d{1,2}.\d{1,2}.\d{1,2}(?:-beta)?.\d+$"

Version of the Hosted Fields JavaScript library that you are using.

The current production version is 1.7.0.261471.

scenarioenumRequired

Indicates if a merchant wants to take a payment or tokenize a customer’s payment details:

payment - The merchant wants to run a sale or run a sale and tokenize in the same transaction.
tokenization - The merchant wants to save the customer’s payment details to take a payment later or to update a customer’s payment details that they’ve already saved.

secureTokenIdstringOptional1-200 characters

Unique identifier that represents a customer's payment details. If a merchant wants to update a customer's payment details that are linked to a secure token, include the secureTokenId in your request.

Response headers

locationstring

URI reference to created resource.

Response

Successful request. We created the session and returned a session token.

processingTerminalIdstring

Unique identifier that we assigned to the terminal.

tokenstring

Token that our gateway assigned to the Hosted Fields session. Include this session token in the config file for Hosted Fields. The session token expires after 10 minutes.

expiresAtdatetimeRead-only

Date and time that the token expires. We return this value in the ISO 8601 format.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

406

Not Acceptable Error

409

Conflict Error

415

Unsupported Media Type Error

500

Internal Server Error

1	using Payroc;
2	using System.Threading.Tasks;
3	using Payroc.HostedFields;
4
5	namespace Usage;
6
7	public class Example
8	{
9	public async Task Do() {
10	var client = new PayrocClient();
11
12	await client.HostedFields.CreateAsync(
13	new HostedFieldsCreateSessionRequest {
14	ProcessingTerminalId = "1234001",
15	IdempotencyKey = "8e03978e-40d5-43e8-bc93-6894a57f9324",
16	LibVersion = "1.1.0.123456",
17	Scenario = HostedFieldsCreateSessionRequestScenario.Payment
18	}
19	);
20	}
21
22	}

1	{
2	"processingTerminalId": "1234001",
3	"token": "abcdef1234567890abcdef1234567890",
4	"expiresAt": "2025-07-02T15:30:00.000+02:00"
5	}