Device Signals POC

LinkSDK connect and pay flows on ae03. The SDK collects. This page sets the policy, then shows the envelope the library posted. The page answers that POST itself, so there is no collector and nothing is written to disk.

Credentials

The Lean application token. It goes to the SDK as app_token, and to the sandbox as the lean-app-token header when the pay flow creates an intent.

Optional. A Lean JWT for a customer that is already authenticated. The SDK sends it as a bearer token and skips its own authentication step. Leave it empty to let sandbox: true authenticate from the two fields above.

Not an SDK input — LinkSDK reads no client_id. It is kept here because the client id and the client secret together mint the access token. Mint the token elsewhere: a client secret must never reach a page.

The two required fields start with the committed ae03 test values, which are not secret. Every field is saved in sessionStorage, thus a pasted token dies with the tab.

Policy — every signal starts off

The pay flow needs a payment source at a bank that accepts the intent's currency. On ae03 only Lean Mockbank, Lean Mockbank Two and Lean Open Banking MockBank publish AED transfer limits. A source at any other mock bank shows "Currency not supported" and cannot be chosen. Press Link a payment account first if the pay flow offers you nothing usable.
This run: payment —, payment source at —. Change either in apps/demo/.env — copy apps/demo/.env.example to start. A hosted build reads no .env, so those two are fixed at build time.

No collection yet.

Envelope, as written by the SDK

Nothing collected yet.

SDK callbacks

No session started.

What collection costs the mount

Not measured yet.