Understand the two-step portal flow

First create a client session with the private bearer token and contact_id, then call /me with the short-lived session token. The guide then takes you through the correct route, the checks to complete before making changes, the workflow in order, and the evidence to review afterwards.

What you’ll accomplish

First create a client session with the private bearer token and contact_id, then call /me with the short-lived session token. The instructions below follow the supplied module’s live menu, controller, form, model and JavaScript flow.

Follow these steps

1. Go to External backend → POST /proplix_api_gateway/portal_api/session.
2. Find the record, endpoint, field or action used to understand the two-step portal flow.
3. Complete the displayed values exactly as described in this guide.
4. Select the available save, submit, send, upload, create, update or confirm action.
5. Return to the related register, portal, activity log or API response and verify the expected result.

Fields and options to review

Rules the system enforces

• The action is available only where the supplied module exposes it and the signed-in user or API client meets the stated access conditions.
• Internal helpers are documented under the visible workflow or endpoint they support rather than presented as invented menu pages.

How to confirm it worked

• The understand the two-step portal flow workflow completes without a validation, permission, ownership or availability error.
• The related record, portal view, activity entry, notification log or API response shows the expected state.
• Client-visible, public and API data remains limited to the code-backed ownership and visibility rules.

Security, privacy and operational checks

• Use controlled test records and non-production credentials before wider rollout.
• Grant least privilege and protect secure links, personal data, uploaded files, signatures, API tokens, allowed origins and server IPs.

Continue with related guidance