You are right. Found a solution to this a while back.
Basically redirect to a webpage hosted on an external platform with the session id and public api key in the url parameter then have the external webpage retrieve them and run the redirectToCheckout() function.