Production Base URL
Sandbox Base URL
Signed request performed by back-end SDKs that includes a X-Yoti-Auth-Digest.
Generate signed request Yoti API endpoints are authenticated through signed requests. To create a signed request:
Concatenate the following elements using the '&' character:
- HTTP method
- Path
- Query string (enriched with a timestamp and a nonce parameter)
- Base64 encoded request body (if available)
Apply SHA256withRSA to the resulting string, using your PEM private key generated from the Yoti Hub.
Base64 encode the result from step 2.
Example GET request:
GET&/sessions?sdkId=b88ad843-13cc-44ba-a3e0-053f71d89b1f&nonce=b88ad843-13cc-44ba-a3e0-053f71d89b1f×tamp=1480509893Example POST request:
POST&/sessions?sdkId=b88ad843-13cc-44ba-a3e0-053f71d89b1f&nonce=b88ad843-13cc-44ba-a3e0-053f71d89b1f×tamp=1480509893&ew0KImlkIiA6IDEsDQoibmFtZSIgOiBpdGVtDQoNCn0=Parameters:
- SDK ID: UUID generated when producing your Yoti keys
- nonce: UUID strings
- Timestamp: UNIX timestamps (number of elapsed seconds since Jan 1st 1970)
| Key | In | |
|---|---|---|
| X | Header |
Backend Endpoints
Endpoints for the Back-End SDK (Relying Business)
Get all the supported documents
OK
Create a new session
Session created
Payload validation error or malformed request
Unauthorised request (wrong key or signature)
Unauthorised request (app is disabled or has no associated organisation_id)
The application for provided sdk id does not exist
The service is unavailable
Retrieve the entire Session
OK
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
Session or App not found
Delete the session and everything associated with it
Session deleted
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
App not found
The checks are not finished
Retrieve media content
Retrieves a specific media
OK. Response body depends on Content-Type of the media
OK. Regulations prevent us from returning the media content
Bad Request
Unauthorised request (wrong key or signature)
Session, Media or App not found
Delete media content
Deletes a specific media content
No content
Bad Request
Unauthorised request (wrong key or signature)
Session, Media or App not found
Session is locked (session in progress before triggering checks) or Resource is locked (session in progress with checks triggered)
Response Config Endpoints
Endpoints for configuring Sandbox behaviour
Fetch the configuration for a specified sdk application ID
OK
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
App not found
Update the configuration for a specified sdk application ID
Updated configuration successfully
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
Unauthorised request (app is disabled or has no associated organisation_id)
App not found
The service is unavailable
Get the configured config for a specified session ID
OK
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
Session or App not found
Update the configuration for a specified session ID
Updated configuration successfully
Invalid payload or request missing headers or query params
Unauthorised request (wrong key or signature)
Unauthorised request (app is disabled or has no associated organisation_id)
App not found
The service is unavailable