Skip to content

Login

Webhooks

Login attempt
Webhook

Request

Notification that a login attempt was completed successfully or declined.

Headers
call-refstring

A call reference generated by the caller and unique to the caller to provide correlation between the caller and system with a maximum length of 255

published-timestampinteger, (int64)required

The timestamp, expressed in Epoch timestamp using millisecond precision, when this event was published.

signaturestringrequireddeprecated

The signature to verify the authenticity of this request. This is the base64 hash (HmacSHA256) of the published-timestamp using your API key.

signature-v2stringrequired

The signature to verify the authenticity of this request. This is the base64 hash (HmacSHA256) of the call-ref + payload + published-timestamp using your API key.

Bodyapplication/jsonrequired
credentialobject(CredentialId)required
identityobject(StringWrappedTypeId)
typestringrequired

Login type can be with password or with auth/access token

statusstring(LoginEventLoginEventStatus)required
Enum:"VERIFIED""DECLINED""EXPIRED"
publishedTimestampstring^[0-9]+$required

Epoch timestamp using millisecond precision.

Payload
{
  "credential": {
    "type": "ROOT",
    "id": "string"
  },
  "identity": {
    "type": "string",
    "id": "string"
  },
  "type": "string",
  "status": "VERIFIED",
  "publishedTimestamp": "string"
}

Responses

Success - No Content