Skip to main content
GET
Get authoritative state for this user's checkout

Authorizations

Authorization
string
header
required

60-3600 second end-user JWT minted via /credits/end-users/{id}/token. If the JWT has sid, send the original session value in X-Locus-Session-Id; sid contains only its SHA-256 fingerprint. Bearer tokens are replayable until expiry; use short TTLs, optional session binding, and Idempotency-Key on operations.

Headers

X-Locus-Session-Id
string

Required only when the end-user JWT carries sid. Send the original high-entropy session value; sid is its SHA-256 fingerprint. Ignored for secret-key authentication.

Required string length: 16 - 128
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:-]{15,127}$

Path Parameters

sessionId
string
required
Pattern: ^cs_

Response

Checkout state

success
any
required
sessionId
string
required
state
enum<string>
required
Available options:
pending,
completed,
expired
paymentStatus
string
required