KYC Verification

require_once 'ProntoIDKYCClient.php';

// Credentials from your KYC service
$apiEndpoint = 'https://75o3us32d7.execute-api.us-east-1.amazonaws.com/production/create-kyc-verification';
$apiKey      = 'pk_live_…';
$apiSecret   = 'sk_live_…';

$client = new ProntoIDKYCClient($apiEndpoint, $apiKey, $apiSecret);

// $userId = your internal user identifier
$result = $client->createVerification($userId, [
    'redirect_url'     => 'https://yoursite.com/verified',  // optional
    'state'            => 'order_8821',                      // optional passthrough
    // ProntoRelease — omit if no release form required
    'release_required' => true,                               // require affidavit after KYC
    'release_type'     => 'creator_model',                    // 'creator_model' | 'creator'
    'community'        => 'malibustrings',                    // optional community slug
]);

if ($result) {
    // Redirect the user to start verification
    header('Location: ' . $result['verification_url']);
} else {
    $error = $client->getLastError();
    // Handle error…
}

curl -X POST \
  https://75o3us32d7.execute-api.us-east-1.amazonaws.com/production/create-kyc-verification \
  -H 'Content-Type: application/json' \
  -H 'X-API-Key: pk_live_…' \
  -H 'X-API-Secret: sk_live_…' \
  -d '{
    "client_reference":  "user_abc123",
    "redirect_url":      "https://yoursite.com/verified",
    "state":             "order_8821",
    "release_required":  true,
    "release_type":      "creator_model",
    "community":         "malibustrings"
  }'

{
  "success":            true,
  "request_id":         "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "verification_token": "vt_…",
  "verification_url":   "https://verify.prontoid.com/start?token=vt_…",
  "expires_at":         1735430400,
  "client_reference":   "user_abc123"
}

// kyc-webhook.php
$payload = json_decode(file_get_contents('php://input'), true);

if ($payload['status'] === 'approved') {
    $userId = $payload['client_reference'];  // your internal user ID
    // Mark user as verified in your database
    markUserVerified($userId);
}

// Always respond 200 to acknowledge receipt
http_response_code(200);
echo json_encode(['received' => true]);

require_once 'ProntoIDKYCClient.php';

$client = new ProntoIDKYCClient(
    'https://75o3us32d7.execute-api.us-east-1.amazonaws.com/production/create-kyc-verification',
    $_ENV['PRONTOID_API_KEY'],
    $_ENV['PRONTOID_API_SECRET']
);

$result = $client->createVerification($userId, [
    'redirect_url'     => 'https://yoursite.com/verified',
    'state'            => 'order_8821',
    'metadata'         => ['plan' => 'premium'],
    // ProntoRelease (omit if no release form required)
    'release_required' => true,
    'release_type'     => 'creator_model',  // 'creator_model' | 'creator'
    'community'        => 'malibustrings',  // optional community slug
]);

if ($result) {
    header('Location: ' . $result['verification_url']);
    exit;
}

// Error handling
$error    = $client->getLastError();     // human-readable message
$httpCode = $client->getLastHttpCode(); // raw HTTP status

{
  "event":            "verification.completed",
  "request_id":       "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "client_reference": "user_abc123",
  "status":           "approved",  // "approved" | "rejected" | "pending_review"
  "state":            "order_8821",
  "completed_at":     1735430400,
  "checks": {
    "identity_verification": "passed",
    "age_verification":      "passed",  // present if enabled
    "liveness_check":        "passed",  // present if premium+
    "face_match":            "passed"   // present if premium+
  },
  "metadata": { "plan": "premium" }
}

// User selected "Verify as Model" on your platform
$result = $client->createVerification($userId, [
    'release_required' => true,
    'release_type'     => 'creator_model',
    'community'        => 'malibustrings',  // optional
]);

// After KYC: user sees "Identity Verified — One More Step"
// with a "Sign Release Form →" button instead of "Go to website".
// Clicking it routes to:
// secure.prontoid.com/release-form.php?access_token=…&community=malibustrings

// User selected "Verify as Photographer" on your platform
$result = $client->createVerification($userId, [
    'release_required' => true,
    'release_type'     => 'creator',
    'community'        => 'malibustrings',  // optional
]);

// After KYC: user sees "Sign Photographer Release →" button.
// The release form collects a structured records-keeping address
// and renders the producer-only affidavit with § 2257 model warrant.

// Standard KYC — no release form (release_required defaults to false)
$result = $client->createVerification($userId, [
    'redirect_url' => 'https://yoursite.com/verified',
    'state'        => 'order_8821',
]);

// After KYC: user is sent to return_url as normal.