Z Zise Developers
/
English
账户中心 › API 参考 › 实名

换一条 L2 进阶认证的托管屏链接

POST /v1/kyc/l2/sessions scope: kyc:write
代会员调用 · 必带 x-on-behalf-of 需 x-idempotency-key

可选兼容接口，返回 24 小时有效的一次性托管链接。商户 App 推荐使用 POST /v1/kyc/l2/applications 直接提交参数，无需本接口。签票及提交时检查 L2 开关、主 L1 已通过、无未驳回 L2 申请。本接口前置不满足返回 state_invalid；校验失败不消耗票据。

前置条件

  • L2 总开关已开启
  • 该会员的主 L1 档案已 APPROVED
  • 该会员名下没有未被驳回的 L2 申请
字段类型必填说明
x-on-behalf-of string 必填 代哪个会员发起。external_member_id 或 mem_<uuid> 都认。 ⚠ 它参与幂等指纹：同一把键换一个会员回 409。
x-idempotency-key string 必填 UUID v4。逐会员一把。

请求体

无字段。会员完全由 x-on-behalf-of 决定。

响应

201已签发。把 hosted_url 转给终端用户即可。 响应里没有会话 id，这是刻意的 —— 那段字符串就是凭据本身。
{
  "hosted_url": "https://api.zinfra.vip/hosted/kyc/l2/kyc_3c81f0d29a4417d18e0b2f6a1c9d4e77",
  "expires_at": "2026-08-14T05:00:00.000Z"
}
400member_context_required 没带 x-on-behalf-of · state_invalid 三道前置有一道不满足 （不下发是哪一道 —— 用 GET /v1/kyc 的 level 与 l2_status 判断）
403insufficient_scope 缺 kyc:write
404member_not_found（含「属于别的商户」与「已停用」）
409idempotency_key_reused 同一把键换了会员或换了请求体 · idempotency_in_progress 首次请求还在处理中
请求 
curl -X POST 'https://api.zinfra.vip/v1/kyc/l2/sessions' \
  -H 'x-auth-token: Bearer $TOKEN' \
  -H 'x-on-behalf-of: $MEMBER_ID' \
  -H 'x-idempotency-key: $IDEMPOTENCY_KEY' \
  -H 'content-type: application/json' \
  -d '{}'
const res = await fetch("https://api.zinfra.vip/v1/kyc/l2/sessions", {
  method: "POST",
  headers: {
    "x-auth-token": "Bearer $TOKEN",
    "x-on-behalf-of": "$MEMBER_ID",
    "x-idempotency-key": "$IDEMPOTENCY_KEY",
    "content-type": "application/json",
  },
  body: JSON.stringify({}),
});
// 金额按字符串读，别让它变成 number
const data = await res.json();
import requests

res = requests.post(
    "https://api.zinfra.vip/v1/kyc/l2/sessions",
    headers={
        "x-auth-token": "Bearer $TOKEN",
        "x-on-behalf-of": "$MEMBER_ID",
        "x-idempotency-key": "$IDEMPOTENCY_KEY",
        "content-type": "application/json",
    },
    json={},
)
# 金额用 Decimal(str(...))，不要 float
data = res.json()
req, _ := http.NewRequest("POST", "https://api.zinfra.vip/v1/kyc/l2/sessions",
    strings.NewReader(`{}`))
req.Header.Set("x-auth-token", "Bearer $TOKEN")
req.Header.Set("x-on-behalf-of", "$MEMBER_ID")
req.Header.Set("x-idempotency-key", "$IDEMPOTENCY_KEY")
req.Header.Set("content-type", "application/json")
res, err := http.DefaultClient.Do(req)
// 金额字段用 string 接，不要 float64
HttpRequest req = HttpRequest.newBuilder()
    .uri(URI.create("https://api.zinfra.vip/v1/kyc/l2/sessions"))
    .header("x-auth-token", "Bearer $TOKEN")
    .header("x-on-behalf-of", "$MEMBER_ID")
    .header("x-idempotency-key", "$IDEMPOTENCY_KEY")
    .header("content-type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString("""
{}
"""))
    .build();
// 金额字段用 String / BigDecimal，不要 double
$ch = curl_init('https://api.zinfra.vip/v1/kyc/l2/sessions');
curl_setopt_array($ch, [
  CURLOPT_CUSTOMREQUEST => 'POST',
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'x-auth-token: Bearer $TOKEN',
    'x-on-behalf-of: $MEMBER_ID',
    'x-idempotency-key: $IDEMPOTENCY_KEY',
    'content-type: application/json',
  ],
  CURLOPT_POSTFIELDS => <<<'JSON'
{}
JSON,
]);
$res = curl_exec($ch);
// 金额用 bcmath / 字符串，不要 floatval
201 
{
  "hosted_url": "https://api.zinfra.vip/hosted/kyc/l2/kyc_3c81f0d29a4417d18e0b2f6a1c9d4e77",
  "expires_at": "2026-08-14T05:00:00.000Z"
}