/realms/{realm}/protocol/openid-connect/token
Retrieve Token
OAuth2 Client Credentials token retrieval.
REST API rebuilt from CheckID API contract V1.2.260123, replacing the legacy OAuth2 Client Credentials contract.
V1.2.260123 · OAuth2 · Bearer · WSO2 · x-billcode-id.
/realms/{realm}/protocol/openid-connect/token
OAuth2 Client Credentials token retrieval.
/v1/get/system/info
Discover service versions, languages, methods and runtime configuration.
/identification/v1/initialize/group
Initialize subjects for 1:N face, fingerprint or iris identification.
/v1/create/subject
Create a PERSONAL or ENTERPRISE subject before checks are initiated.
/v1/get/subjects
List subjects using paging and identity/contact filters.
/v1/get/subject/details
Retrieve subject information and optional DG/bind method details.
/v1/update/subject
Update authenticated subject information and claim-source context.
/v1/create/process
Create one verification process inside one subject; a subject may contain many processes.
/v1/get/process/detail
Retrieve process status and source-defined result context.
/v1/perform/process
Execute the process with conditional evidence according to process type.
/v1/get/management/transactions
Retrieve transaction records for authorized management use.
Source → Scope → Implementation → Evidence → Limitation
takes public examples from CheckID API & Kafka Specifications V1.2.260123 and the corresponding OpenAPI. Each operation retains its PUBLIC/PARTNER/CUSTOMER-PARTNER classification to avoid exposing schema beyond publication scope.
The current contract groups Authentication, System, Identification Groups, Subjects, Processes and Management. A Subject provides identity/business-entity context; a Process represents a verification action/purpose; transaction/management views support authorized traceability.
Public-catalog identifiers include `x-subject-id`, `x-process-id`, `x-billcode-id` and `x-group-id` in relevant operations. does not rename raw contract fields for aesthetics.
Request/response content depends on `process_type` and operation. Required/optional/conditional rules are sourced from OpenAPI/specification and not inferred from one example.
HTTP status and application result/error codes are documented with raw message, meaning and recommended action. Historical typos in raw literals remain source-traceable until the API owner confirms a correction.
API publication records source version, deprecation/errata when available, environment boundary, and never embeds real secrets or PII.