White-label integration
With a white-label integration, Spendstream hosts and runs a fully branded rewards storefront on your subdomain. This page summarises what is involved. The step-by-step build is in the white-label single sign-on guide.
What Spendstream does
- Hosts the storefront and applies your branding.
- Runs the brand catalogue, checkout, gift card fulfilment and payments.
- Records transactions and rewards against your customers.
- Manages the supporting infrastructure.
What you do
Responsibility | Owner |
Brand assets, colours and logo | You, supplied once during onboarding |
Reward structure and configuration | You, agreed once during onboarding |
Storefront, catalogue, checkout and payments | Spendstream |
Registering your customers with Spendstream | You, through the API |
Signing customers in to the storefront | You, through a single sign-on redirect |
The single sign-on handover
Single sign-on lets a customer move from your platform into the storefront without logging in again. The build is small.
- Fetch a bearer token with
getTokenand cache it (valid for 10 hours). - On a customer’s first visit, register them with
addNewUser. On later visits, look them up withgetUsersList?UID=. Both return a per-customertoken. - Redirect the customer’s browser to
https://YOUR_SUBDOMAIN.spendstream.co/login/YOUR_TOKEN. The token is a path segment, not a query parameter. - Optionally add
?redirecturl=with an absolute URL to choose the landing page.
⚠️ Warning: An unrecognised token silently redirects to the storefront homepage instead of showing an error. Fetch the token fresh on each visit, and treat the login URL as a credential: do not log it, email it or expose it in client-side code.
Testing
You do not build payments on this path, but you can complete a purchase on staging to test the handover end to end. Staging is sandboxed and costs nothing. See Testing payments on staging for test cards.
Read the full guide
The white-label single sign-on guide covers the first-visit and returning-visit branches, token lifetimes, troubleshooting and a go-live checklist, including the response behaviours that most often catch integrators out.
Related pages
- Choose your integration model
- Choosing between white-label and Full API
- Authentication
- Go-live checklist
On this page
- White-label integration