Skip to main content
POST
cURL
Use this operation for a wallet whose start response carries next_action.type = request_digital_credential, such as Google Wallet. Authenticate with the application API key that started the verification, from your backend. Send exactly what the wallet returned: {protocol, data} from navigator.credentials.get in the browser, or the parsed credentialJson from Android Credential Manager. The response is encrypted to Didit, so do not alter it. Didit checks the issuer’s signature against its trusted issuer roots, every returned value against its signed digest, and the device signature over your origin and this request, then decides the verification. A response can be submitted once. A second submit returns the verification that was already decided. A verification that does not take a wallet response answers 409 with error: "not_a_digital_credentials_wallet". See Digital ID wallet APIs for the full sequence, including the browser and Android snippets.

Authorizations

x-api-key
string
header
required

Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys.

Path Parameters

request_id
string<uuid>
required

The request_id the start endpoint returned.

Body

What the wallet answered your page or app, for a request_digital_credential verification.

response
object
required

Exactly what the wallet returned: {protocol, data} of the DigitalCredential from navigator.credentials.get, or the parsed credentialJson of Android's DigitalCredential. Encrypted to Didit; do not alter it.

Response

One standalone wallet verification, as every wallet endpoint answers it.

request_id
string<uuid>
required
wallet_verification
object
required
vendor_data
string | null
required
metadata
object | null
required

The metadata object sent at start, or null.

created_at
string<date-time>
required