Validate an anonymous browser service destination

Same-origin first-party browser route. Accepts one real US service address in the POST body, validates it server-side with Google Address Validation, and returns only an opaque short-lived proof bound to a Secure HttpOnly SameSite=Strict cookie. It never returns the submitted or normalized address, coordinates, or exact accuracy. Google Maps attribution must remain visible in the first-party destination UI.

post/v1/destination-location-proofs

Request

  • Base URL: https://loppee.com
  • URL: https://loppee.com/v1/destination-location-proofs
  • Auth: none required

Request body

addressstring required

A real US service address. It is accepted only in this POST body and is never returned, placed in a URL, or exposed to an external agent.

premise_proximity_confirmation_tokenstring

Opaque one-time token from the immediately preceding premise-proximity challenge for the same address and authority.

Response

Anonymous destination proof created.

location_proof_idstring uuid required
status'ready' required
location_kind'destination' required
display_label'Selected service address' required
usable_untilstring date-time required
uses_remaininginteger required
address_returnedunknown required
coordinates_returnedunknown required

Changes

No recorded changes to this operation across all 1 revision of this API.