Run a verification

# 1. Fetch catalog
export MASTERID_API_KEY="<YOUR_API_KEY>"
export MASTERID_API_SECRET="<YOUR_API_SECRET>"

curl -s "https://masterid.me/api/public/v1/catalog" \
  -H "X-API-Key: $MASTERID_API_KEY" \
  -H "X-API-Secret: $MASTERID_API_SECRET" \
  -H "Content-Type: application/json" | jq .

# 2. Request consent wording
product="tin"
fields='{"tin":"<APPROVED_TIN>"}'

curl -s -X POST "https://masterid.me/api/public/v1/verifications/consent" \
  -H "X-API-Key: $MASTERID_API_KEY" \
  -H "X-API-Secret: $MASTERID_API_SECRET" \
  -H "Content-Type: application/json" \
  -d "{\"product\":\"$product\",\"fields\":$fields}" | jq '.data.consentText'

# 3. Submit verification
consentText="<EXACT_CONFIRMED_TEXT>"
idempotencyKey="$(openssl rand -hex 16)"

curl -s -X POST "https://masterid.me/api/public/v1/verifications" \
  -H "X-API-Key: $MASTERID_API_KEY" \
  -H "X-API-Secret: $MASTERID_API_SECRET" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $idempotencyKey" \
  -d "{\"product\":\"$product\",\"fields\":$fields,\"consentConfirmed\":true,\"consentText\":\"$consentText\"}" | jq '.data.sessionId'

# 4. Poll for result
curl -s "https://masterid.me/api/public/v1/verifications/<SESSION_ID>" \
  -H "X-API-Key: $MASTERID_API_KEY" \
  -H "X-API-Secret: $MASTERID_API_SECRET" \
  -H "Content-Type: application/json" | jq '.data.status'

const crypto = require('node:crypto');

const API_KEY = process.env.MASTERID_API_KEY;
const API_SECRET = process.env.MASTERID_API_SECRET;
const BASE = 'https://masterid.me/api/public/v1';

async function masterid(path, opts = {}) {
  const res = await fetch(`${BASE}${path}`, {
    headers: {
      'X-API-Key': API_KEY,
      'X-API-Secret': API_SECRET,
      'Content-Type': 'application/json',
      ...(opts.headers || {}),
    },
    ...opts,
  });
  const body = await res.json().catch(() => null);
  return { status: res.status, body };
}

async function runVerification() {
  // 1. Fetch catalog
  const catalog = await masterid('/catalog');
  console.log('Catalog products count:', catalog.body?.data?.length);

  // 2. Request consent
  const product = 'tin';
  const fields = { tin: '<APPROVED_TIN>' };
  const consentRes = await masterid('/verifications/consent', {
    method: 'POST',
    body: JSON.stringify({ product, fields }),
  });
  const consentText = consentRes.body?.data?.consentText;
  if (!consentText) throw new Error('Consent text missing');

  // 3. Present for genuine confirmation, then submit
  const idempotencyKey = crypto.randomBytes(16).toString('hex');
  const subRes = await masterid('/verifications', {
    method: 'POST',
    headers: { 'Idempotency-Key': idempotencyKey },
    body: JSON.stringify({
      product,
      fields,
      consentConfirmed: true,
      consentText,
    }),
  });
  const sessionId = subRes.body?.data?.sessionId;
  if (!sessionId) throw new Error('Session ID missing');
  console.log('Submitted sessionId:', sessionId);

  // 4. Stop if completed immediately
  if (subRes.status === 200) {
    console.log('Completed immediately:', subRes.body);
    return subRes.body;
  }

  // 5. Poll for result (no more frequently than every 15 seconds)
  while (true) {
    await new Promise(r => setTimeout(r, 15_000));
    const poll = await masterid(`/verifications/${sessionId}`);
    const status = poll.body?.data?.status;
    console.log('Poll status:', status);
    if (status !== 'pending') {
      return poll.body;
    }
  }
}

runVerification().catch(console.error);

import os, time, json, uuid
import requests

API_KEY = os.environ["MASTERID_API_KEY"]
API_SECRET = os.environ["MASTERID_API_SECRET"]
BASE = "https://masterid.me/api/public/v1"

HEADERS = {
    "X-API-Key": API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
}

def masterid(method, path, extra_headers=None, json_body=None):
    h = {**HEADERS, **(extra_headers or {})}
    resp = requests.request(method, f"{BASE}{path}", headers=h, json=json_body, timeout=30)
    return resp.status_code, resp.json() if resp.text else None

def run_verification():
    # 1. Catalog
    status, catalog = masterid("GET", "/catalog")
    print("Catalog:", catalog and catalog.get("data"))

    # 2. Consent wording
    product = "tin"
    fields = {"tin": "<APPROVED_TIN>"}
    status, consent_resp = masterid("POST", "/verifications/consent", json_body={"product": product, "fields": fields})
    consent_text = consent_resp["data"]["consentText"] if consent_resp else ""
    if not consent_text:
        raise ValueError("Consent text missing")

    # 3. Submit with idempotency key
    idempotency_key = str(uuid.uuid4())
    status, sub_resp = masterid("POST", "/verifications", extra_headers={"Idempotency-Key": idempotency_key}, json_body={
        "product": product,
        "fields": fields,
        "consentConfirmed": True,
        "consentText": consent_text,
    })
    session_id = sub_resp["data"]["sessionId"] if sub_resp else ""
    if not session_id:
        raise ValueError("Session ID missing")

    # 4. Immediate completion
    if status == 200:
        return sub_resp

    # 5. Poll
    while True:
        time.sleep(15)
        status, poll = masterid("GET", f"/verifications/{session_id}")
        status_value = poll["data"]["status"] if poll else None
        print("Poll status:", status_value)
        if status_value != "pending":
            return poll

if __name__ == "__main__":
    print(run_verification())