Integrations
Persona verification integration
FurlPay contains a Persona webhook integration for processing verification outcomes. Provider credentials and an approved Persona configuration are required; this technical integration page is not an offer of identity verification in every account or region.
Availability is account and provider dependent
Webhook handling
| Method | Path | Description |
|---|---|---|
| POST | /api/webhooks/persona | Verifies Persona's signature over the raw request body and processes a bound inquiry outcome |
The handler verifies the persona-signature header before parsing JSON. It requires PERSONA_WEBHOOK_SECRET, rejects an invalid or missing signature, de-duplicates deliveries and checks the inquiry's server-side user binding before changing a verification status. Missing configuration fails closed.
Deployment requirements
- Configure the Persona account and server-side credentials through the deployment's approved secret-management process.
- Register the exact production webhook URL with Persona and use the matching webhook secret.
- Exercise inquiry binding, duplicate delivery, failure and out-of-order events in a non-production environment first.
- Do not treat a webhook acknowledgement as proof that a user passed verification; inspect the account's recorded status.
User-facing guidance
The supported verification provider, required documents and current status should be displayed by the authenticated product. See the identity verification help page for safe user guidance.