DEVELOPERS · CHECKID

HTTP Headers & Signing Scope

Authorization, Content-Type, Host, Authorization and Authorization in signed requests.

CONTRACTVersioned API / SDK

AUTHOAuth2 / environment

OUTPUTResponse · result code · evidence

AUTHENTICATION JOURNEY

From integration credential to verification result

The source sample defines a 900-second access-token lifetime; subsequent requests use a Bearer token with the request-signing context.

Source contractSections 2 and 3.1 · OAuth2 Client Credentials + Gets Access Token

Integration CredentialsRP-issued integration context

→

OAuth2 Client CredentialsSigned HTTP request

→

Get Access TokenShort-lived Bearer token

→

Subject / ProcessIdentity verification lifecycle

→

Evidence / ResultCheckID ID · result · signed claims

AWS SIGNATURE VERSION 4

Six-step request signing

The source contract requires Endpoint requests to be signed; the signing flow uses HMAC-SHA256.

Source contractSection 2 · OAuth2 Client Credentials · API source revision history 2.1

HTTP Request

Method · URI · query · headers · payload

Canonical Request

Canonical URI/query/headers + signed headers + payload hash

String to Sign

Algorithm + timestamp + credential scope + canonical-request digest

Signing Key

HMAC chain: date → region → service → aws4_request

Signature

HexEncode(HMAC(signing key, string to sign))

Authorization Header

Credential · SignedHeaders · Signature

CANONICAL REQUESTSOURCE MODEL

CanonicalRequest =
  HTTPRequestMethod + "\n" +
  CanonicalURI + "\n" +
  CanonicalQueryString + "\n" +
  CanonicalHeaders + "\n" +
  SignedHeaders + "\n" +
  HexEncode(SHA256(RequestPayload))

AUTHORIZATIONREDACTED

Authorization: AWS4-HMAC-SHA256
  Credential=<ACCESS_KEY>/<DATE>/<REGION>/<SERVICE>/aws4_request,
  SignedHeaders=content-length;content-type;host;x-amz-date;x-api-key,
  Signature=<CALCULATED_SIGNATURE>

AuthorizationCredential data + SignedHeaders + Signature

AuthorizationISO 8601 basic format

AuthorizationIssued integration value — never embedded in public sample

Hash / HMACSHA-256 / HMAC-SHA256