What Are Payment Consents

A payment consent is an authorization from a customer that allows you to initiate payments on their behalf without requiring further customer involvement. This is commonly used for recurring payments such as bills, subscriptions, and memberships.

Supported Providers and Methods

Provider	Method	Flow	Description
`bankgirot`	`autogiro`	`redirect`	Creates an Autogiro mandate (autogiro medgivande). The customer signs through a redirect-based flow.
`swish`	`recurring`	`e_commerce` / `m_commerce`	Creates a Swish Recurring consent. The customer approves via the Swish app using e-commerce or m-commerce flow.

Consent Lifecycle

A payment consent moves through the following statuses during its lifetime:

Status	Description
`INITIATED`	The consent has been created and the signing flow has started.
`PENDING`	The customer is in the process of signing.
`ACTIVE`	The consent has been signed and can be used to initiate payments.
`DECLINED`	The customer declined the consent.
`EXPIRED`	The signing request expired before the customer completed it.
`ABORTED`	The signing flow was aborted.
`CRASHED`	A technical error occurred during signing.
`REVOKED`	A previously active consent has been revoked.

Status Flow

              ┌──────────┐
              │ INITIATED│
              └────┬─────┘
                   │
              ┌────▼─────┐
         ┌────│ PENDING  │────┐
         │    └────┬─────┘    │
         │         │          │
         ▼         ▼          ▼
   ┌──────────┐ ┌──────┐ ┌─────────┐
   │ DECLINED │ │ACTIVE│ │ EXPIRED │
   └──────────┘ └──┬───┘ └─────────┘
                   │
              ┌────▼─────┐
              │ REVOKED  │
              └──────────┘

Note: Consents can also transition to ABORTED or CRASHED from INITIATED or PENDING.

Only consents with the status ACTIVE can be used to initiate payments.

Status Callbacks

When creating a consent, you can provide a status_callback_url to receive webhook notifications whenever the consent status changes. Callbacks are sent for the following statuses:

ACTIVE
DECLINED
EXPIRED
ABORTED
CRASHED
REVOKED

The callback payload includes the consent id, the new status, the provider, method, and any metadata you provided when creating the consent.