Verification Records

Verify an x401 principal-identity presentation

Without PROOF-RESPONSE, returns a signed OpenID4VP proof challenge. With a valid presentation, verifies the principal, issues a signed verification record, and returns proof-result metadata.

post/api/x401/verify

Request

  • Base URL: https://flint.network
  • URL: https://flint.network/api/x401/verify
  • Auth: one of:
    • none
    • API key in header PROOF-RESPONSE

Headers

PROOF-RESPONSEstring

Base64url-encoded x401 proof response. Omit to request a challenge.

Request body

noncestring required

Unique replay-protection nonce. UUID v4 is recommended.

timestampstring date-time required

Request timestamp. Must be within the server replay-protection window.

partner_idstring

Merchant or platform identifier used for partner-scoped public IDs.

merchant_referencestring

Merchant transaction, invoice, or API access reference.

Response

Principal presentation verified and signed record issued.

okunknown required
protocol'x401' required
route'/api/x401/verify' required
verdict'allow' | 'step_up' | 'review' | 'block' required
scorenumber required
confidencenumber
top_reasonsstring[]
record_idstring required
signed_recordstring required

Example response

{
  "record": {
    "envelope_version": "hybrid-v0"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.