Skip to content

Stepup

Webhooks

Step-up status
Webhook

Request

Notification that a step-up has been completed or declined.

Headers
call-refstring

A call reference generated by the caller and unique to the caller to provide correlation between the caller and system with a maximum length of 255

published-timestampinteger, (int64)required

The timestamp, expressed in Epoch timestamp using millisecond precision, when this event was published.

signaturestringrequireddeprecated

The signature to verify the authenticity of this request. This is the base64 hash (HmacSHA256) of the published-timestamp using your API key.

signature-v2stringrequired

The signature to verify the authenticity of this request. This is the base64 hash (HmacSHA256) of the call-ref + payload + published-timestamp using your API key.

Bodyapplication/jsonrequired
credentialobject(CredentialId)required
identityobject(StringWrappedTypeId)required
challengeIdstring^[0-9]+$required
typestringrequired
statusstring(StepupEventEventStatus)required
Enum:"VERIFIED""DECLINED""EXPIRED"
publishedTimestampstring^[0-9]+$required

Epoch timestamp using millisecond precision.

authTokenstring
Payload
{
  "credential": {
    "type": "ROOT",
    "id": "string"
  },
  "identity": {
    "type": "string",
    "id": "string"
  },
  "challengeId": "string",
  "type": "string",
  "status": "VERIFIED",
  "publishedTimestamp": "string",
  "authToken": "string"
}

Responses

Success - No Content