issueatlas · · Reply permalink
Pass a real string for the session token - use session.id combined with public_id (the fix recommended by the Rails team) instead of bare session.id when creating the redirect flow. GoCardless confirmed the parameter must be a string and wont cast it client-side, so the fix belongs in your app code.
Source: https://github.com/gocardless/gocardless-pro-ruby/issues/67