{
"eventType": "manual_attempt_rejected",
"verificationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}Verification webhook
Pion sends this webhook for verification-related events. The webhook is signed using HMAC-SHA256 for security verification.
{
"eventType": "manual_attempt_rejected",
"verificationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"timestamp": "2023-11-07T05:31:56Z",
"requestId": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}Authorizations
HMAC-SHA256 signature of the raw request body using your shared secret (hex encoded). Verify by computing HMAC-SHA256(shared_secret, raw_request_body) and comparing with this header using constant-time comparison. Also validate that the timestamp is recent (within 5 minutes) and use requestId to detect replays.
Body
- Manual Attempt Rejected
- Verification Failed
- Verification Success
- Verification Expired
- Reminder
Sent when a manual attempt has been rejected (but the user can still try again).
Event type
"manual_attempt_rejected"Verification ID to look up
ISO Timestamp - validate this is recent (e.g., within 5 minutes)
Unique request identifier - use to detect and ignore/reject replays within the timestamp window
Response
Webhook received and processed successfully
Was this page helpful?