Skip to main content
PATCH
Update a checkout session

Authorizations

x-api-key
string
header
required

API key for service-to-service or merchant authentication.

Headers

x-correlation-id
string<uuid>

Unique identifier for request tracing. Generated by the client or server if not provided.

Example:

"550e8400-e29b-41d4-a716-446655440000"

x-business-account-id
string<uuid>

The business account to act on, for platform use cases. When sent, that account is the merchant for the request: resources are created under it, reads and 404 checks are scoped to it, and per-merchant uniqueness (such as merchant_reference_id) applies within it. The API key's own account is recorded as the account acting on its behalf. Omit it to act on the API key's own account.

Example:

"550e8400-e29b-41d4-a716-446655440000"

Path Parameters

session_id
string<uuid>
required

Unique identifier of the checkout session

Example:

"550e8400-e29b-41d4-a716-446655440000"

Body

application/json

Update an existing checkout session

Request body for updating a checkout session

redirect_urls
object

Redirect URLs for checkout session

three_ds_required
boolean
deprecated

Deprecated and ignored. 3D Secure is enforced per channel; turn it on under Settings, Acceptance, Payment methods in the dashboard. Sending this field still succeeds and has no effect.

Example:

false

processing_type

Standard one-time payment

Allowed value: "REGULAR"
Example:

"REGULAR"

customer
object

Customer details to update

metadata
object

Additional metadata

Example:
payment_methods
string[]

Allowed payment methods

Credit or debit card

Allowed value: "card"

Response

Checkout session updated.

Response returned after creating or updating a checkout session

id
string<uuid>
required

Unique checkout session identifier

Example:

"550e8400-e29b-41d4-a716-446655440000"

session_id
string
required
deprecated

Deprecated alias of id. Use id instead.

Example:

"550e8400-e29b-41d4-a716-446655440000"

hosted_url
string<uri>
required

URL for the hosted checkout page

Example:

"https://checkout.lite.sa/ses_a1b2c3d4e5f6"

client_secret
string
required

Client secret for frontend SDK authentication

Example:

"cs_a1b2c3d4e5f6"

status
required

Session is active and awaiting payment

Allowed value: "Pending"
Example:

"Pending"

expires_on
string<date-time>
required

Session expiry timestamp

Example:

"2026-05-18T12:00:00.000Z"

order_id
string
required

Order reference

Example:

"ORD-123456"

amount
integer
required

Session amount in minor units

Example:

10000

currency
string
required

Currency code (ISO 4217)

Example:

"SAR"

customer
object

Customer details

order
object

Order details

channel_id
string

Channel ID for the session

Example:

"550e8400-e29b-41d4-a716-446655440000"

terminal_id
string<uuid>
read-only

Online terminal the session's payment is taken through. Present for business accounts only.

Example:

"0b9d1c3e-6a51-4f6e-9a54-0f4f2b6e7d11"