persona-webhooks-events

# persona webhooks events | sed 's/\b\(.\)/\u\1/g' ## Overview HMAC signature verification, inquiry.completed/approved/declined events, idempotent processing. ## Prerequisites - Completed `persona-install-auth` setup - Valid Persona API key (sandbox or production) ## Instructions ### Step 1: Configure Webhook in Dashboard ```text 1. Dashboard > Settings > Webhooks > Add Webhook 2. URL: https://your-app.com/webhooks/persona 3. Events: inquiry.completed, inquiry.approved, inquiry.declined, verification.passed, verification.failed 4. Copy the webhook secret for signature verification ``` ### Step 2: Webhook Endpoint with HMAC Verification ```typescript import express from 'express'; import crypto from 'crypto'; const app = express(); app.post('/webhooks/persona', express.raw({ type: 'application/json' }), async (req, res) => { const signature = req.headers['persona-signature'] as string; const secret = process.env.PERSONA_WEBHOOK_SECRET!; // Verify HMAC-SHA256 signature const expectedSig = crypto .createHmac('sha256', secret) .update(req.body) .digest('hex'); if (!crypto.timingSafeEqual(Buffer.from(signature || ''), Buffer.from(expectedSig))) { return res.status(401).json({ error: 'Invalid signature' }); } const event = JSON.parse(req.body.toString()); await handlePersonaEvent(event); res.status(200).json({ received: true }); } ); ``` ### Step 3: Event Handlers ```typescript async function ha...