KYC (Backend)

npm install axios

PODS_API_KEY=your-api-key
WALLET_ADDRESS=0x...
# Hosted flow (optional; defaults to your first allowlisted URL)
REDIRECT_URL=https://app.example.com/kyc/return
# Sumsub flow
SUMSUB_SHARE_TOKEN=...
SUMSUB_APPLICANT_ID=...
# External-evidence flow (base64 image bytes)
LIVENESS_IMAGE_BASE64=...
DOC_FRONT_BASE64=...
DOC_BACK_BASE64=...

import axios from 'axios'

const pods = axios.create({
  baseURL: 'https://api.pods.finance',
  headers: {
    'x-api-key': process.env.PODS_API_KEY,
    'Content-Type': 'application/json'
  }
})

const TERMINAL = ['approved', 'rejected', 'rejected_retryable', 'blocked']

async function pollKycStatus (kycUserId) {
  while (true) {
    const { data: status } = await pods.get('/api/v1/kyc/status', { params: { kycUserId } })
    console.log('status:', status.status, 'brlaEnabled:', status.brlaEnabled)
    if (TERMINAL.includes(status.status)) return status
    await new Promise(resolve => setTimeout(resolve, 5000))
  }
}

const { data } = await pods.post('/api/v1/kyc/sumsub-share-token', {
  cpf: '52998224725',
  shareToken: process.env.SUMSUB_SHARE_TOKEN,
  sumsubApplicantId: process.env.SUMSUB_APPLICANT_ID,
  email: '[email protected]',
  walletAddress: process.env.WALLET_ADDRESS
})

console.log('kycUserId:', data.kycUserId, 'status:', data.status)
await pollKycStatus(data.kycUserId)

const { data: session } = await pods.post('/api/v1/kyc/hosted/sessions', {
  cpf: '52998224725',
  email: '[email protected]',
  walletAddress: process.env.WALLET_ADDRESS,
  redirectUrl: process.env.REDIRECT_URL
})

// A bearer link: hand it to the applicant, never log it in production.
console.log('Open:', session.verificationLink)

const final = await pollKycStatus(session.kycUserId)
if (final.status === 'rejected_retryable') {
  // Same CPF reopens only the rejected step; POST /api/v1/kyc/hosted/reset starts over.
  console.log('Retryable:', final.reason?.code)
}

const { data: session } = await pods.post('/api/v1/kyc/sessions', {
  cpf: '12345678909',
  email: '[email protected]',
  walletAddress: process.env.WALLET_ADDRESS
})

const { data: submit } = await pods.post(`/api/v1/kyc/sessions/${session.kycUserId}/submit`, {
  applicant: { fullName: 'Maria Silva', dateOfBirth: '1990-05-14', phone: '+5511999999999' },
  address: {
    country: 'BRA', state: 'SP', city: 'São Paulo', zipCode: '01310100',
    streetAddress: 'Av. Paulista', number: '1000', complement: 'apto 51'
  },
  liveness: {
    image: { base64: process.env.LIVENESS_IMAGE_BASE64, mimeType: 'image/jpeg' },
    attestation: {
      provider: 'aws_rekognition_face_liveness',
      status: 'SUCCEEDED',
      confidence: 95.78,
      sessionId: '47fa2a26-bb7a-4ca0-85f1-129ad6a6eb0b',
      challenge: { type: 'FaceMovementAndLightChallenge', version: '2.0.0' },
      completedAt: '2026-08-13T14:58:10Z'
    }
  },
  documents: {
    documentType: 'RG',
    front: { base64: process.env.DOC_FRONT_BASE64, mimeType: 'image/jpeg' },
    back: { base64: process.env.DOC_BACK_BASE64, mimeType: 'image/jpeg' },
    attestation: {
      provider: 'bigdatacorp_documentoscopy',
      onboardingId: 'b7d2...',
      extracted: { fullName: 'MARIA SILVA', birthDate: '1990-05-14', cpf: '12345678909', documentType: 'RG' }
    }
  }
})

console.log('submit status:', submit.status)
await pollKycStatus(session.kycUserId)

node kyc-backend.js sumsub            # or: pods-hosted, external-evidence