Share Session
Mint a short-lived JWT that lets a specific Didit application import this finished session. Pair with POST /v3/session/import-shared/.
KYC and KYB support
Works for both User Verification (KYC) and Business Verification (KYB) sessions. Didit resolves thesession_id against both session types and generates a JWT share token that includes:
Requirements
- Session must be in a finished status (
APPROVED,DECLINED,IN_REVIEW). - You must have the
write:sessionsprivilege. - The
for_application_idmust be a valid Didit application (usually a partner’s application).
Examples
TTL bounds
Related
Authorizations
Path Parameters
UUID of the source verification session to mint a token for.
"11111111-2222-3333-4444-555555555555"
Body
UUID of the Didit application that will redeem the token. Must exist, must not be deleted, and must differ from the calling application. Find it in the Business Console under Settings → Application.
"a5f3bca2-46e2-411e-90ef-a580900a57ee"
Token lifetime, in seconds. Minimum 60, maximum 86400 (24 h). Defaults to 3600 (1 h).
60 <= x <= 864003600
Response
Share token minted.
HS256-signed JWT. Pass this verbatim as share_token to POST /v3/session/import-shared/ on the target application.
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
Echoes the target application UUID that the token is bound to.
"a5f3bca2-46e2-411e-90ef-a580900a57ee"
Whether the source session is a User Verification (KYC) or Business Verification (KYB) session.
user, business