Single sign-on parameters reference

fcsid

string

The customer’s Foxy session ID. Required to maintain the session across domains, particularly when a store isn’t using a custom subdomain and the customer has third-party cookies disabled.

timestamp

integer, epoch time

The current time on Foxy’s server. Used only to confirm your server’s clock is in sync with Foxy’s — don’t return this value as-is (see below).

checkout_type

string

The type of transaction involved. Passed conditionally. If present, your endpoint shouldn’t make a CURL request to the cart, or the cart will be emptied.

fc_auth_token

string (SHA-1 hash)

A hash of customer_id, an expiration timestamp, and the store’s secret key, joined with |. Generated using the Foxy SDK or a custom implementation.

fcsid

string

The Foxy session ID, echoed back from the value Foxy sent to your endpoint.

fc_customer_id

integer

The customer’s Foxy customer ID, as set or retrieved via the API. Use 0 to allow an unauthenticated customer through to checkout.

timestamp

integer, epoch time

The future time at which this authentication token expires. Must match the timestamp used to generate fc_auth_token. If a request arrives with an expired token, Foxy redirects the customer back to your SSO endpoint to generate a new one.