Explicitly replace eligible unsigned access

curl --request POST \
  --url https://sandbox.paylinedata.com/api/v1/applications/{applicationId}/handoff/reissue \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "requestId": "6e037ebc-8094-4dc9-83e3-dcf3b9bb7505",
  "expectedHandoffId": "71a6b94b-e538-494f-a7cb-e61dbe9a9871"
}
'

{
  "requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "disposition": "reissued",
  "status": "<string>",
  "handoff": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "state": "active",
    "url": "<string>",
    "issuedAt": "2023-11-07T05:31:56Z",
    "expiresAt": "2023-11-07T05:31:56Z",
    "purpose": "completion_or_signing"
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

API Reference

Explicitly replace eligible unsigned access

Requires a canonical draft/in_progress Application, one authoritative session and the expected active, expired or revoked predecessor. No archive, merchant linkage, ambiguous authority, building/active signing input or signing ceremony. Atomically retires the predecessor, issues one new 30-day grant, rotates session access and rebinds the same session; answers, pricing, documents and protected records remain. Old URLs/cookies/delayed writes fail. Receipt identity is environment + tenant + stable caller + Application + handoff_reissue + requestId. Same request recovers current handoff without renewal even after later reissue/signing; changed expectedHandoffId conflicts. Different operations on one predecessor return handoff_changed to the loser. After network failure/503 retry the original request. Revoked old credentials are never revived. No query parameters. 1,024 UTF-8 byte body, 8-second read deadline, 30 attempts per 60 seconds per stable caller independent of key replacement.

curl --request POST \
  --url https://sandbox.paylinedata.com/api/v1/applications/{applicationId}/handoff/reissue \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "requestId": "6e037ebc-8094-4dc9-83e3-dcf3b9bb7505",
  "expectedHandoffId": "71a6b94b-e538-494f-a7cb-e61dbe9a9871"
}
'

{
  "requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "disposition": "reissued",
  "status": "<string>",
  "handoff": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "state": "active",
    "url": "<string>",
    "issuedAt": "2023-11-07T05:31:56Z",
    "expiresAt": "2023-11-07T05:31:56Z",
    "purpose": "completion_or_signing"
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

{
  "error": {
    "code": "invalid_request",
    "message": "<string>",
    "fields": [
      {
        "path": "<string>",
        "code": "<string>"
      }
    ],
    "retryable": true
  },
  "supportReference": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

applicationId

string<uuid>

required

Body

application/json

requestId

string

required

Pattern: ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

expectedHandoffId

string<uuid>

required

Response

Durable reissue or same-operation recovery, with current handoff projection.

requestId

string<uuid>

required

applicationId

string<uuid>

required

disposition

enum<string>

required

Available options:

reissued,

recovered

status

string

required

handoff

object

required

Show child attributes