Logins and accounts
A Fluz user is a login: one person with an email, phone number, PIN, and identity verification. A user can hold several accounts:
“Personal” (in the dashboard) and
CONSUMER (in the API) mean the same thing.
Wallets, spend accounts, cards and transactions all belong to an account, not to the user. The same user acting through their personal account and through their business account sees two separate ledgers.
Every token is bound to one account
generateUserAccessToken takes a userId and an accountId. The accountId decides which account the token acts as:
- the user’s personal
accountIdgives aCONSUMERtoken; - a business
accountIdgives aBUSINESStoken.
Sending the wrong type returns
AUTH-0002 with a message naming the type required, for example getBusinessCategories requires account type CONSUMER. Mint a token with the other accountId and retry.
Two kinds of application
Where you click in the Developers area decides what your application can do.If you will create users, verify them, or issue cards on anyone’s behalf other than your own, you need an OAuth Integration application. An app made with Create new app cannot be upgraded into one. Create a new app from the template instead.
Application status
New applications do not start active.
Fluz moves applications to
ACTIVE; it isn’t self-serve. After you create an application, send its name or ID to your Fluz contact. Until then, calls that act for other users return:
ACTIVE, for example registerUser and the VERIFY_KYC scope. Each environment’s application is enabled separately.
Environments
Staging and live are separate systems:
Each environment has its own users, accounts, applications, and API keys. A key from one never works in the other. An application you create while logged in to
fluz.app is a live application, even if you only intend to test with it.
Putting it together
A platform that onboards businesses, such as a card program for its own clients, usually looks like this in staging:- You have an OAuth Integration application, owned by your company’s account, moved to
ACTIVEby Fluz. - For each customer, you
registerUserthe person, verify them, and send them through OAuth. Your token for them isCONSUMER. - With that
CONSUMERtoken you callgetBusinessCategoriesandregisterBusiness. - Once KYB approves the business, you mint a
BUSINESStoken (sameuserId, businessaccountId) and issue cards and move money on the business.