Skip to main content
POST
Verify user identity (HMAC)

Authorizations

x-api-key
string
header
required

API key in lum_pk_* format. Pass via x-api-key header or Authorization: Bearer <key>.

Body

application/json
userId
string
required

External user identifier.

hmac
string
required

Hex-encoded HMAC-SHA256 signature.

email
string<email>

Optional user email.

name
string

Optional user display name.

Response

HMAC valid. End user upserted.

verified
boolean
Example:

true