Didit Console

Authentication

Didit V2 uses API Keys to authenticate requests and ensure that only authorized applications can access our services. All API requests must include a secret API key sent via an HTTP header. Requests that do not include a valid key, or use an incorrect key, will be rejected with a 401 Unauthorized error status code.

Finding Your API Key

In Didit, API keys are scoped to a specific Application within your account. An Application is a workspace where you can configure workflows and manage verifications for a particular project or environment.

An API key is generated automatically for each Application you create. To find your key:

  1. Log in to the Didit Business Console.
  2. Select the Application you want to work with from the dropdown menu at the top.
  3. Navigate to the Verifications section in the left-hand sidebar.
  4. Click the Settings icon (βš™οΈ) in the top right corner of the Verifications page.
  5. Your API Key will be displayed in this section. You can copy it from here.
🚧

Your API Key is a Secret Treat your API key like a password. It provides full access to the API on behalf of your Application.


Making Authenticated Requests

To authenticate an API request, you must include your secret API key in the x-api-key HTTP header.

Here is an example of an authenticated request to our Create Session endpoint using cURL:

curl --request POST \
     --url https://verification.didit.me/v2/session/ \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'x-api-key: YOUR_API_KEY' \
     --data '
{
  "workflow_id": "WORKFLOW_ID",
  "vendor_data": "USER_ID",
  "callback": "CALLBACK_URL"
}
'