ProntoID API Documentation

import os
import requests

API_ENDPOINT = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/pronto-login-get-authorization-uri"
params = {
    "client_id": os.environ.get("PRONTOID_CLIENT_ID"),
    "scope": "openid age_verification" # Request both claims
}
response = requests.get(API_ENDPOINT, params=params)
response.raise_for_status()
auth_uri = response.json().get("authorization_uri")
                                        

import java.net.URLEncoder;
import java.nio.charset.StandardCharsets;

String apiEndpoint = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/pronto-login-get-authorization-uri";
String clientId = System.getenv("PRONTOID_CLIENT_ID");

// For both user ID and age verification
String scope = "openid age_verification"; 

String query = String.format("client_id=%s&scope=%s",
    URLEncoder.encode(clientId, StandardCharsets.UTF_8),
    URLEncoder.encode(scope, StandardCharsets.UTF_8)
);
String fullUrl = apiEndpoint + "?" + query;

// ... Perform HttpClient GET request to fullUrl ...
                                        

import os
import requests
# ... state verification logic ...

TOKEN_ENDPOINT = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/get-oidc-token"
payload = {
    "client_id": os.environ.get("PRONTOID_CLIENT_ID"),
    "client_secret": os.environ.get("PRONTOID_CLIENT_SECRET"),
    "authorization_code": request.args.get('code'),
}
response = requests.post(TOKEN_ENDPOINT, json=payload)
response.raise_for_status()
id_token = response.json().get("id_token")
                                        

// ... state verification logic ...
String tokenEndpoint = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/get-oidc-token";
String clientId = System.getenv("PRONTOID_CLIENT_ID");
String clientSecret = System.getenv("PRONTOID_CLIENT_SECRET");
String authorizationCode = request.getParameter("code");

String payload = String.format(
    "{\"client_id\": \"%s\", \"client_secret\": \"%s\", \"authorization_code\": \"%s\"}",
    clientId, clientSecret, authorizationCode
);
// ... HttpClient POST request to tokenEndpoint with payload ...
// Parse response.body() to get the "id_token"
                                        

import os
import requests

VERIFY_ENDPOINT = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/verify-oidc-token"
id_token = "... the token from Step 2 ..."

payload = {
    "id_token": id_token,
    "client_id": os.environ.get("PRONTOID_CLIENT_ID"),
    "client_secret": os.environ.get("PRONTOID_CLIENT_SECRET"),
}
response = requests.post(VERIFY_ENDPOINT, json=payload)
response.raise_for_status()

token_data = response.json()
if token_data.get("active"):
    # Token is valid, access claims like token_data.get("sub")
    is_age_verified = token_data.get("https://prontoid.com/age_verified")
                                        

String verifyEndpoint = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/verify-oidc-token";
String idToken = "... the token from Step 2 ...";

String payload = String.format(
    "{\"id_token\": \"%s\", \"client_id\": \"%s\", \"client_secret\": \"%s\"}",
    idToken, System.getenv("PRONTOID_CLIENT_ID"), System.getenv("PRONTOID_CLIENT_SECRET")
);
// ... HttpClient POST request to verifyEndpoint with payload ...
// Parse response JSON into a Map or custom object
// Map tokenData = ...

if (Boolean.TRUE.equals(tokenData.get("active"))) {
    // Token is valid, access claims
    boolean isAgeVerified = (boolean) tokenData.get("https://prontoid.com/age_verified");
}
                                        

import os
import requests

PRONTOID_CLIENT_ID = os.environ.get("PRONTOID_CLIENT_ID")
PRONTOID_CLIENT_SECRET = os.environ.get("PRONTOID_CLIENT_SECRET")
PRONTOID_API_ENDPOINT = "https://uxvq4ew6td.execute-api.us-east-1.amazonaws.com/production/get-platform-operation-authorization-session-token"

# Data from your authenticated user
content_url_to_verify = "https://your-platform.com/content/abc-123"
final_callback_url = "https://your-platform.com/pronto_return"

payload = {
    "platform_client_id": PRONTOID_CLIENT_ID,
    "platform_api_key": PRONTOID_CLIENT_SECRET,
    "platform_content_url": content_url_to_verify,
    "platform_callback_url": final_callback_url,
    "expiration_seconds": 600,
    "action_type": "RELEASE_FORM_UPLOAD"
}

response = requests.post(PRONTOID_API_ENDPOINT, json=payload)
response.raise_for_status() # Raises exception for non-2xx status

session_token = response.json().get("session_token")

# Securely return this token to your frontend JavaScript
# (e.g., in a Flask response)
# return jsonify({"status": "success", "session_token": session_token})