IntegrationOverview

Overview

PsikologieHub exposes a RESTful API that lets partner systems create a widget SSO session for HR/recruiters and their candidates. After a session is created, the partner frontend embeds the returned widgetUrl in an <iframe> and the widget handles authentication, dashboard rendering, and assessment flows internally.

This page covers the system overview, technical specification, and the end-to-end integration flow.

Integration at a Glance

ItemValue
AuthHMAC-SHA256 signature in the request body
EndpointPOST /api/v2/partner/{partnerId}/sessions
Content-Typeapplication/json
Main outputwidgetUrl (embedded via iframe)
ProtocolHTTPS (mandatory)

Technical Specification

ParameterValue
API TypeRESTful API
Base URL{BASE_URL}/api/v2/partner
Main EndpointPOST /{partnerId}/sessions
AuthenticationHMAC-SHA256 Signature in the request body
Content-Typeapplication/json
VersioningPartner API contract v2
ProtocolHTTPS (mandatory)

End-to-End Integration Flow

Integration flow diagram

  1. The HR/recruiter logs in to the partner’s internal system.
  2. The partner backend prepares the data: user, company, candidates.
  3. The partner backend generates an HMAC-SHA256 signature from the canonical string using the partner secretKey.
  4. The partner backend calls POST /partner/{partnerId}/sessions with the signature in the body.
  5. PsikologieHub validates partnerId, signature, request structure, and the partner domain.
  6. The response contains sessionToken, widgetUrl, and expiresIn.
  7. The partner backend forwards widgetUrl to the frontend.
  8. The frontend embeds the widget via <iframe> using widgetUrl as the source.
  9. The HR/recruiter is automatically signed into the dashboard.
  10. Candidates take the prepared assessment inside the widget.
  11. When the session expires, the partner calls Create Session again.
HomePrerequisites