Note
This guide is specific to Web SDK 2.0. If you are still using 1.x, you can find documentation here. Contact your Incode Representative for upgrade information and check if you are a candidate for this upgrade.
Full rollout to all clients still TBD.
<incode-flow> is the complete, orchestrated identity verification experience as a standard Web Component. It runs the flow sequence configured in your Incode dashboard end-to-end.
Important: the recommended integration creates a session via createSession() (or your backend) and passes its token to <incode-flow>. The component also supports self-loading configuration with configurationId and either apiKey or clientId.
Tag
// Side-effect import — registers the <incode-flow> custom element
import '@incodetech/web/flow';
import '@incodetech/web/flow/styles.css';
Properties
Set these as JavaScript properties on the element (not as HTML attributes):
| Property | Type | Required | Description |
|---|---|---|---|
config |
FlowConfig |
✅ | Flow configuration object (see below) |
onFinish |
(result?: FinishStatus) => void |
✅ | Called when the flow completes |
onError |
(error: string | undefined, errorCode?: number, machineErrorCode?: string) => void |
❌ | Called on fatal errors |
FlowConfig
FlowConfig has two shapes — a token-based variant (recommended) and a self-loading variant. The two are mutually exclusive.
Token variant (recommended): pass a token obtained from createSession() (ideally created on your backend):
| Property | Type | Required | Description |
|---|---|---|---|
token |
string |
✅ | Session token |
lang |
string |
❌ | Language code (e.g., 'en-US', 'es-MX') |
enableHome |
boolean |
❌ | Show the SDK's built-in home screen |
authHint |
string |
❌ | QR/auth hint when re-entering a flow |
redirectToMobileUrl |
string |
❌ | Override the destination URL for the Redirect to Mobile step. The SDK adds the session parameters to this URL. |
wasmConfig |
WasmConfig |
❌ | WASM paths (see WASM Configuration) |
injectCss |
boolean |
❌ | 2.3.0: load Flow and module styles as screens become visible. Default false. Keep base and theme CSS; omit the eager Flow stylesheet when enabled |
cssNonce |
string |
❌ | CSP nonce for styles inserted by injectCss |
spinnerConfig |
SpinnerConfig |
❌ | Loading spinner customization |
disableDashboardTheme |
boolean |
❌ | Skip applying the dashboard's theme tokens |
urlUuid |
string |
❌ | QR anti-phishing token from the URL (mobile leg) |
useCPF |
boolean |
❌ | Enable CPF-only fields on the dashboard's existing ID_OCR step. The step key and configuration are preserved, cpfOnly: true is added, and the standard ID OCR editing, validation, and submission lifecycle remains in use. Has no effect when the dashboard flow has no ID_OCR step. |
onFlowEvent |
(event: FlowEvent) => void |
❌ | Curated flow milestones |
onModuleLoading |
(moduleKey: string) => void |
❌ | Module begins loading (lazy chunk) |
onModuleLoaded |
(moduleKey: string) => void |
❌ | Module loaded |
onWasmWarmup |
(pipelines: string[]) => void |
❌ | WASM warmup begins |
onUrlUuidRefreshed |
(urlUuid: string) => void |
❌ | New urlUuid available — host should update the address bar |
assets |
AssetOverrides |
❌ | Per-instance branded-illustration overrides for this flow, keyed to the published allowlist. Overrides the global setup({ uiConfig }) value for this flow instance only. See Asset Overrides |
animations |
AnimationOverrides |
❌ | Per-instance Lottie-animation overrides for this flow. Same precedence as assets. See Asset Overrides |
Set redirectToMobileUrl to replace the dashboard URL for the Redirect to Mobile step:
flow.config = {
token: session.token,
redirectToMobileUrl: 'https://yourapp.com/mobile-verification',
};
The SDK adds the session parameters to this URL. This property has no effect when the flow does not use Redirect to Mobile.
Self-loading variant — convenient for prototyping; avoid in production because it puts the API key in the browser:
| Property | Type | Required | Description |
|---|---|---|---|
apiKey (or clientId) |
string |
✅ | Auth key for session creation |
configurationId |
string |
✅ | Dashboard flow ID |
externalId, externalCustomerId, customFields, uuid, urlUuid, interviewId |
various | ❌ | Forwarded to createSession() |
Plus any of the optional fields from the token variant above (lang, enableHome, callbacks, etc.) |
Note
apiURL is NOT in FlowConfig. It belongs on the global setup() call. The component reuses the API URL configured there.
Basic Usage
Step 1: Create the session
Create the session via createSession() (typically from your backend) and configure the SDK:
import { setup } from '@incodetech/core';
import { createSession, initializeSession } from '@incodetech/core/session';
await setup({ apiURL: 'https://demo-api.incodesmile.com' });
const session = await createSession(apiKey, {
configurationId: 'your-config-id',
language: 'en-US',
externalId: 'optional-external-id',
});
await initializeSession({ token: session.token });
The token is still passed to the component itself via flowElement.config.token (see Step 2) — initializeSession activates it on the SDK's HTTP client; the component reads it from its own config. setup({ apiURL, token }) is also supported as a one-shot convenience and delegates to initializeSession internally.
Step 2: Mount the component
HTML / vanilla TypeScript:
<incode-flow id="flow"></incode-flow>
<script type="module">
import '@incodetech/web/themes/light.css';
import '@incodetech/web/base.css';
import '@incodetech/web/flow';
import '@incodetech/web/flow/styles.css';
const flow = document.getElementById('flow');
flow.config = { token: session.token, lang: 'en-US', enableHome: true };
flow.onFinish = (result) => {
if (result?.redirectionUrl) {
window.location.href = result.redirectionUrl;
}
};
flow.onError = (error, code) => console.error('Flow error:', error, code);
</script>
React:
React 18 or earlier: add a one-time JSX augmentation so TypeScript recognizes
<incode-flow>and the other Incode tags. See Framework Integration → TypeScript: JSX support forincode-*tags. React 19+ doesn't need this.React 19+: you can also drop the ref ceremony entirely and pass
config/onFinish/onErroras ordinary JSX props. See Framework Integration → React 19+ shortcut.
import { useEffect, useRef } from 'react';
import type { FlowConfig } from '@incodetech/web/flow';
import type { FinishStatus } from '@incodetech/core/flow';
import '@incodetech/web/flow';
import '@incodetech/web/flow/styles.css';
type FlowElement = HTMLElement & {
config: FlowConfig;
onFinish: (result?: FinishStatus) => void;
onError: (
error: string | undefined,
code?: number,
machineErrorCode?: string,
) => void;
};
export function FlowMount({ token }: { token: string }) {
const ref = useRef<FlowElement>(null);
useEffect(() => {
const el = ref.current;
if (!el) return;
el.config = { token, lang: 'en-US', enableHome: true };
el.onFinish = (result) => {
if (result?.redirectionUrl) window.location.href = result.redirectionUrl;
};
el.onError = (error, code) => console.error('Flow error:', error, code);
}, [token]);
return (
<incode-flow ref={ref} style={{ display: 'block', height: '100vh' }} />
);
}
For Angular and Vue, see Framework Integration.
Complete React Example
React 18 or earlier: add the JSX augmentation from Framework Integration → TypeScript: JSX support for
incode-*tags. React 19+ doesn't need it, and can also use the simpler form from Framework Integration → React 19+ shortcut.
import { useState, useEffect, useRef } from 'react';
import { setup } from '@incodetech/core';
import { createSession, initializeSession } from '@incodetech/core/session';
import type { FlowConfig } from '@incodetech/web/flow';
import type { FinishStatus } from '@incodetech/core/flow';
import '@incodetech/web/themes/light.css';
import '@incodetech/web/base.css';
import '@incodetech/web/flow';
import '@incodetech/web/flow/styles.css';
type FlowElement = HTMLElement & {
config: FlowConfig;
onFinish: (result?: FinishStatus) => void;
onError: (
error: string | undefined,
code?: number,
machineErrorCode?: string,
) => void;
};
function MyVerificationFlow() {
const [sessionToken, setSessionToken] = useState<string | null>(null);
const [error, setError] = useState<string | null>(null);
const flowRef = useRef<FlowElement>(null);
useEffect(() => {
const initialize = async () => {
try {
await setup({ apiURL: 'https://demo-api.incodesmile.com' });
const session = await createSession('your-api-key', {
configurationId: 'your-config-id',
language: 'en-US',
});
await initializeSession({ token: session.token });
setSessionToken(session.token);
} catch (err) {
setError(
err instanceof Error ? err.message : 'Failed to create session',
);
}
};
initialize();
}, []);
useEffect(() => {
const el = flowRef.current;
if (!el || !sessionToken) return;
el.config = { token: sessionToken, lang: 'en-US', enableHome: true };
el.onFinish = (result) => console.log('Flow completed:', result);
el.onError = (error) => console.error('Flow error:', error);
}, [sessionToken]);
if (error) return <div>Error: {error}</div>;
if (!sessionToken) return <div>Initializing...</div>;
return (
<incode-flow ref={flowRef} style={{ display: 'block', height: '100vh' }} />
);
}
Custom Start and Completion Screens
Start screen
Set enableHome: true in the flow config to request the SDK launch screen. Dashboard configuration can suppress it. For a host-owned start screen, render your introduction and mount <incode-flow> when the user chooses to begin; omit enableHome or set it to false to avoid a second start screen.
Completion screen
Render your own completion screen from <incode-flow>'s onFinish callback. Its optional FinishStatus result contains redirectionUrl, action, scoreStatus, endScreenTitle, and endScreenText. The end-screen copy can be null; provide your own fallback copy and handle an absent result. See Finish Status for the full type.
Keep any session interviewId or Flow configuration ID your host needs from the original session/configuration inputs. These identifiers are not fields of the onFinish result. Completion alone does not mean approval; use the returned outcome when choosing your screen.
Language
Set the UI language via the lang property in your config:
flow.config = { token: session.token, lang: 'es' /* Spanish */ };
The SDK ships translations for ~85 locales (including regional variants like en-DG, es-MX, pt-BR, zh-TW, fr-CA). See Internationalization for the full list, fallback behavior, and dashboard interaction.
Event Callbacks
onFinish
Required callback called when the flow finishes successfully. The component does not render a completion screen — you must handle the finish status yourself:
flow.onFinish = (result) => {
console.log('Action:', result?.action); // 'approved' | 'rejected' | 'none'
console.log('Status:', result?.scoreStatus); // 'OK' | 'WARN' | 'FAIL' | ...
console.log('Redirect:', result?.redirectionUrl);
if (result?.action === 'approved' && result.redirectionUrl) {
window.location.href = result.redirectionUrl;
} else if (result?.action === 'rejected') {
// Show rejection message
}
};
The result object (typed as FinishStatus) contains:
redirectionUrl: URL to redirect to (if configured)action:'approved' | 'rejected' | 'none'scoreStatus:'OK' | 'WARN' | 'MANUAL_OK' | 'FAIL' | 'UNKNOWN' | 'MANUAL_FAIL'endScreenTitle,endScreenText: dashboard completion copy (string | null)
Note that result may be undefined (the callback signature is (result?: FinishStatus) => void), so always null-check before reading fields.
onError
Called when an error occurs:
flow.onError = (error, code, machineErrorCode) => {
console.error('Verification error:', error, code, machineErrorCode);
};
When a flow does not allow multiple onboardings, <incode-flow> checks the session status before loading the first module. If that session is already complete, the component renders its localized finished-session screen and calls onError with machineErrorCode set to SESSION_FINISHED. This applies to token-based, self-loading, and preloaded configurations. Hosts that want to keep the SDK screen visible should not remove or replace the component from this callback.
onModuleLoading / onModuleLoaded
Track lazy-loading of each module's UI chunk via config callbacks:
flow.config = {
token: session.token,
onModuleLoading: (moduleKey) => console.log(`Loading module: ${moduleKey}`),
onModuleLoaded: (moduleKey) => console.log(`Loaded module: ${moduleKey}`),
};
onWasmWarmup
Called when the flow requests background warmup, with only the pipelines needed for that request. It can fire multiple times during one flow: an ID → Selfie flow reports ['idCapture'] after Start, then ['selfie'] once ID is active and ready. Repeated state updates and already-ready pipelines do not produce additional notifications. This callback reports the request, not completion; capture modules still await readiness.
With Home enabled, automatic capture warmup waits for Start, then warms the first reachable capture requirement during consent, document selection, or tutorials. Flows without Home warm after mounting. Fast entry into capture may show its existing loading state while the shared warmup finishes. Progress warms the next requirement; a Redirect to Mobile step stops lookahead. preloadIncodeFlow() preloads metadata and UI only. Explicit setup({ wasm: ... }) preloading remains eager.
flow.config = {
token: session.token,
onWasmWarmup: (pipelines) => {
console.log('Warming up:', pipelines); // e.g., ['idCapture'], later ['selfie']
},
};
WASM Configuration
For ML-powered modules (selfie, ID capture), preload WASM with the wasm option on setup() so models are ready by the time the user reaches a camera step. The Incode CDN serves sensible defaults — you only need to pick which pipelines to preload:
await setup({
apiURL: 'https://demo-api.incodesmile.com',
token: session.token,
wasm: { pipelines: ['selfie', 'idCapture'] },
});
// Then mount <incode-flow> as shown in Basic Usage above.
If you omit the wasm option, the SDK loads WASM lazily when the user reaches the first selfie or ID-capture step. Pass wasm: false to explicitly disable preload (useful when this page only runs phone/email flows). For self-hosted paths, custom model files, or the lower-level warmupWasm() API, see WASM Configuration.
Loading Spinner Customization
<incode-flow> shows a transition spinner during initialization, while a module's lazy chunk loads, and between flow steps. The same spinner is used in every phase.
Default text behavior: if you don't pass spinnerConfig, the spinner renders with no title or subtitle — only the spinning icon. As soon as you set either spinnerConfig.title or spinnerConfig.subtitle, the missing field falls back to the SDK's translated defaults (i18n keys loadingCircle.holdOn for the title, loadingCircle.validating for the subtitle, which display as "Hold on" / "Validating" in English).
SpinnerConfig Options
| Property | Type | Description |
|---|---|---|
renderMode |
'spinnerAndText' | 'spinnerOnly' | 'textOnly' |
Which parts of the loader render. |
size |
'small' | 'medium' | 'large' |
Size of the spinner icon (default: 'medium') |
title |
string |
Deprecated — set copy via i18n instead. Removed in 2.3.0. |
subtitle |
string |
Deprecated — set copy via i18n instead. Removed in 2.3.0. |
Deprecation:
titleandsubtitlestill work in 2.2.0 but will be removed in 2.3.0. Change loader copy through translations instead — overrideloadingCircle.holdOnandloadingCircle.validatingvia Custom Translations. Copy set in translations follows a runtime language change; a literal string here does not.To control loader presentation across every SDK loader — including the module-internal ones this config never reached — use
spinnerin Theming & Styling.
Custom Text
flow.config = {
token: session.token,
spinnerConfig: {
title: 'Verifying your identity',
subtitle: "This won't take long...",
size: 'large',
},
};
CSS Variable Customization
You can also customize the spinner appearance using CSS variables:
:root {
/* Spinner colors */
--spinner-surface-primary: #0066cc;
--spinner-surface-secondary: #e6f0ff;
/* Spinner text */
--spinner-text-title: #1a1a1a;
--spinner-text-subtitle: #666666;
/* Spinner overlay background */
--spinner-surface-overlay: #ffffff;
--spinner-surface-overlay-opacity: 1;
}
See Theming & Styling for more details on CSS customization.
Replacing the Spinner Graphic
The options above recolor and resize the built-in spinner. To replace it entirely with your own SVG or Lottie asset, set the loader.spinner key in assets or animations — see Asset Overrides § The loading spinner.
Web Component
IncodeFlow is also available as a standard Web Component for framework-agnostic usage:
<!DOCTYPE html>
<html>
<head>
<style>
html,
body,
incode-flow {
height: 100%;
margin: 0;
}
incode-flow {
display: block;
}
</style>
</head>
<body>
<incode-flow></incode-flow>
<script type="module">
import { setup } from '@incodetech/core';
import {
createSession,
initializeSession,
} from '@incodetech/core/session';
import '@incodetech/web/themes/light.css';
import '@incodetech/web/base.css';
import '@incodetech/web/flow';
import '@incodetech/web/flow/styles.css';
async function initializeFlow() {
try {
await setup({ apiURL: 'https://demo-api.incodesmile.com' });
const session = await createSession('your-api-key', {
configurationId: 'your-config-id',
language: 'en-US',
});
await initializeSession({ token: session.token });
const flow = document.querySelector('incode-flow');
flow.config = {
token: session.token,
lang: 'en-US',
enableHome: true,
};
flow.onFinish = (result) => {
if (result.action === 'approved' && result.redirectionUrl) {
window.location.href = result.redirectionUrl;
}
};
flow.onError = (error, code) => console.error('Error:', error, code);
} catch (error) {
console.error('Failed to initialize:', error);
}
}
initializeFlow();
</script>
</body>
</html>
TypeScript
Full type definitions are included. Import FlowConfig from @incodetech/web/flow and FinishStatus from @incodetech/core/flow:
import type { FlowConfig } from '@incodetech/web/flow';
import type { FinishStatus } from '@incodetech/core/flow';
import '@incodetech/web/flow';
// Automatically typed via HTMLElementTagNameMap augmentation
const flow = document.createElement('incode-flow');
flow.config = {
// ✅ typed as FlowConfig
token: 'session-token-from-createSession',
lang: 'en-US',
};
flow.onFinish = (result) => {
// ✅ result typed as FinishStatus | undefined
console.log(result?.action);
};
See TypeScript Types for more details.
Unsupported Modules
If the orchestrated flow returns a step whose UI module isn't bundled in this SDK build, <incode-flow> renders a fallback screen titled "Module not available" with a Next button. Clicking Next calls flowManager.completeModule() and advances the flow.
This keeps the rest of a multi-step flow working when one step is unrecognized — useful when the dashboard configuration runs ahead of the SDK release. It applies only to the <incode-flow> component; in headless mode (createOrchestratedFlowManager with your own UI), an unrecognized step key throws "No registered module found for: <KEY>".