The Presence API (Decionis Decision Trust Platform) — open a verification session, evaluate an attested decision, and retrieve signed dossiers. Set baseUrl and a Bearer apiSecret (a server-side tenant key) in your environment. See docs/45.
(Required) Stable key reused when the same action is retried.
\n","key":"Idempotency-Key","value":"qOWRiqOWRi"},{"key":"Accept","value":"application/json"}],"url":"https://presence.decionis.com/v1/sandbox/scenarios/:scenario","description":"Available only for sandbox tenants on deployments that explicitly\nenable fixtures. The signed payload is labelled\nevidence_class: sandbox_fixture; it is not production evidence.
(Required) (This can only be one of allow,block,escalate)
\n","type":"text/plain"},"type":"any","value":"escalate","key":"scenario"}]}},"response":[{"id":"bd416cc3-2f14-45e7-a30e-fabdad092127","name":"Fixture decision","originalRequest":{"method":"POST","header":[{"description":"(Required) Stable key reused when the same action is retried.","key":"Idempotency-Key","value":"qOWRiqOWRi"},{"key":"Accept","value":"application/json"},{"description":"Added as a part of security scheme: bearer","key":"Authorization","value":"BearerDeterministic first-run scenarios that are permanently labelled as fixtures.
\n","_postman_id":"41eafee0-fa6b-4dc4-82cd-069885716717"},{"name":"Sessions","item":[{"name":"Open a verification session for one action","id":"f16fa739-5636-4232-ac63-fdba9ed373ee","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"{{bearerToken}}"}]},"isInherited":false},"method":"POST","header":[{"key":"Content-Type","value":"application/json"},{"key":"Accept","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"intent\": \"Narrow credentials and state for one action-bound verification.
\n","_postman_id":"20934484-da70-4cf6-81c7-249132c5b377"},{"name":"Decisions","item":[{"name":"Evaluate an attested verification request","id":"81ccc4a2-02f5-4f77-a5e6-a719947b6a98","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"{{bearerToken}}"}]},"isInherited":false},"method":"POST","header":[{"description":"(Required) Stable key reused when the same action is retried.
\n","key":"Idempotency-Key","value":"qOWRiqOWRi"},{"key":"Content-Type","value":"application/json"},{"key":"Accept","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"request_id\": \"Policy evaluation and signed verdict creation.
\n","_postman_id":"74602289-5f78-430d-abde-7d542856d340"},{"name":"Dossiers","item":[{"name":"Retrieve one tenant-scoped dossier record","id":"0bdffc3d-8528-454f-a8b7-0be5bde9802c","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"{{bearerToken}}"}]},"isInherited":false},"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://presence.decionis.com/v1/dossiers/:dossierId","urlObject":{"path":["v1","dossiers",":dossierId"],"host":["https://presence.decionis.com"],"query":[],"variable":[{"description":{"content":"(Required)
\n","type":"text/plain"},"type":"any","value":"(Required)
\n","type":"text/plain"},"type":"any","value":"Retrieval and independent verification of sealed evidence.
\n","_postman_id":"a3691794-0344-4078-9f87-32eca0a3be92"},{"name":"Accounts","item":[{"name":"Start email-first sign-in","id":"6bc3023d-6fdf-44e9-b925-77c8f65e2327","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"},{"key":"Accept","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"email\": \"Resolves how an email authenticates. The response status, shape, and\ncopy are identical for every address — known, unknown, invited, or\ndisabled; 400 is returned for malformed input only.
\n","urlObject":{"path":["v1","auth","discover"],"host":["https://presence.decionis.com"],"query":[],"variable":[]}},"response":[{"id":"5713a837-7869-4316-bc7b-660dd7f5c00b","name":"Discovery session and the methods to offer","originalRequest":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"},{"key":"Accept","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"email\": \"Completes the PASSWORD or PASSKEY method for a live discovery and\nmints a single-use identity assertion. Every authentication failure\nanswers a uniform 401 invalid_credentials with comparable timing.\nOIDC methods start at POST /v1/auth/oidc/start instead.
Returns the provider authorization URL for a discovery. Only methods\noffered by that discovery and configured on the deployment are\naccepted.
\n","urlObject":{"path":["v1","auth","oidc","start"],"host":["https://presence.decionis.com"],"query":[],"variable":[]}},"response":[{"id":"9e8b0203-ddc9-4438-a41c-f8c40d3d5298","name":"Provider authorization URL","originalRequest":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"},{"key":"Accept","value":"application/json"}],"body":{"mode":"raw","raw":"{\n \"discovery_id\": \"dsc_cb2c6c697c42fda0d5019fe8\",\n \"method\": \"ENTERPRISE_SSO\"\n}","options":{"raw":{"headerFamily":"json","language":"json"}}},"url":"https://presence.decionis.com/v1/auth/oidc/start"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"Content-Type","value":"application/json"}],"cookie":[],"responseTime":null,"body":"{\n \"status\": \"Validates the provider response and redirects to the web app with a\none-time completion code (poc_…, single-use, 60 s). Tokens are never\ndelivered in the redirect URL itself.
(Required)
\n","type":"text/plain"},"key":"state","value":"(Required)
\n","type":"text/plain"},"key":"code","value":"