Getting Started Guide

const URTENTIC_API_KEY = process.env.URTENTIC_API_KEY;
const URTENTIC_CLIENT_ID = process.env.URTENTIC_CLIENT_ID;
const BASE_URL = 'https://api.urtentic.com/api/v1';

// Create a verification
async function createVerification(workflowId, metadata = {}) {
  const response = await fetch(`${BASE_URL}/verifications`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${URTENTIC_API_KEY}`,
      'X-CLIENT-ID': URTENTIC_CLIENT_ID,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ workflowId, metadata })
  });
  return await response.json();
}

// Check verification status
async function getVerificationStatus(verificationId) {
  const response = await fetch(`${BASE_URL}/verifications/${verificationId}`, {
    headers: {
      'Authorization': `Bearer ${URTENTIC_API_KEY}`,
      'X-CLIENT-ID': URTENTIC_CLIENT_ID
    }
  });
  return await response.json();
}

// Usage
const verification = await createVerification('wf_abc123', { userId: 'user_12345' });
console.log('Verification URL:', verification.verificationUrl);

// Express.js webhook handler
app.post('/webhook/urtentic', express.raw({type: 'application/json'}), (req, res) => {
  const signature = req.headers['x-urtentic-signature'];
  const timestamp = req.headers['x-urtentic-timestamp'];
  const payload = req.body;

  try {
    const currentTime = Math.floor(Date.now() / 1000);
    if (Math.abs(currentTime - parseInt(timestamp)) > 300) {
      return res.status(400).send('Webhook timestamp too old');
    }

    const secretBytes = Buffer.from(WEBHOOK_SECRET, 'base64');
    const expectedSignature = crypto
      .createHmac('sha256', secretBytes)
      .update(payload)
      .digest('hex');

    let sig = signature.startsWith('sha256=') ? signature.substring(7) : signature;

    if (sig !== expectedSignature) {
      return res.status(400).send('Invalid signature');
    }
  } catch (error) {
    return res.status(400).send('Signature verification failed');
  }

  const event = JSON.parse(payload);

  switch (event.eventName) {
    case 'verification_completed':
      console.log('Verification completed:', event.flowId);
      break;
    case 'verification_abandoned':
      console.log('Verification abandoned:', event.flowId);
      break;
    case 'step_completed':
      console.log('Step completed:', event.flowId, 'Step:', event.step.stepId);
      break;
  }

  res.status(200).send('OK');
});

async function handleApiCall() {
  try {
    const response = await fetch(`${BASE_URL}/verifications`, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${URTENTIC_API_KEY}`,
        'X-CLIENT-ID': URTENTIC_CLIENT_ID,
        'Content-Type': 'application/json'
      },
      body: JSON.stringify({ workflowId: 'wf_abc123' })
    });

    if (!response.ok) {
      const error = await response.json();
      console.error('API Error:', error);
      switch (response.status) {
        case 400: console.log('Bad request - check your payload'); break;
        case 401: console.log('Unauthorized - check your API credentials'); break;
        case 429: console.log('Rate limited - wait before retrying'); break;
      }
      return null;
    }
    return await response.json();
  } catch (error) {
    console.error('Network error:', error);
    return null;
  }
}