Verify

Service that validates the user's identity and generates a verification token for Integration with Previred.

This service validates all Onboarding results and generates a secure token that is used to build the verification URL shared with Previred.

Prerequisites

Before calling this service, make sure the user has completed the Onboarding process with valid results:

• facialAuthenticationResult = 3 (Successful facial authentication)

• passiveLivenessResult = 3 (liveness check passed)

• documentValidation = 9001 (Document validation approved)

Endpoint

POST /services/previred/{serviceTransactionId}/verify

Headers

Name	Type	Required	Description
x-api-key	string	Yes	Access authorization API Key.

Path parameters

Parameter	Type	Required	Description
serviceTransactionId	string	Yes	Unique transaction identifier for the transfer process.

Request body

Content-Type: application/json

Parameters

Parameter	Type	Required	Description
scanReference	string	Yes	Reference identifier of the Onboarding process that contains the identity validation results.

Request example

{
  "scanReference": "550e8400-e29b-41d4-a716-446655440000"
}

Responses

200 Success

Response parameters

Parameter	Type	Description
token	string	Verification token to build the verification URL shared with Previred.

Response example

{
  "token": "MUOJHSYODkRtgVENLbXXXpujiDHqGTYS"
}

Store the token securely, as it is required in the next steps.

400 Bad Request

{
  "status": 400,
  "title": "Bad Request",
  "detail": "Invalid request.",
  "type": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400",
  "errors": []
}

401 Unauthorized

{
  "message": "Unauthorized"
}

403 Forbidden

{
  "Message": "User is not authorized to access this resource with an explicit deny"
}

404 Not Found

{
  "status": 404,
  "title": "Not Found",
  "detail": "Resource not found.",
  "type": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404"
}

502 Bad Gateway

{
  "status": 502,
  "title": "Bad Gateway",
  "detail": "Server got an invalid response.",
  "type": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/502"
}

504 Gateway Timeout

{
  "message": "Endpoint request timed out"
}

---

Sending verification evidence to Previred

Once the token is obtained, the AFP must send the url_verificacion to Previred as proof of validation.

Verification URL format

{host}/services/previred/{serviceTransactionId}/certificate?token={token}&apiKey={previredApiKey}

The apiKeyPrevired is accompanied by username and password for authentication.

Call to Previred - Token Request

POST {baseUrlPrevired}/tvi/solicitudTokenWS

Headers:

Name	Type	Required	Description
Content-Type	string	Yes	application/json
Authorization	string	Yes	Basic {authToken}

Request example:

{
  "afiliado": {
    "nombre": "{nombre_afiliado}",
    "apellido_paterno": "{apellido_paterno_afiliado}",
    "apellido_materno": "{apellido_materno_afiliado}",
    "rut_numero": "{rut_numero_afiliado}",
    "dv": "{dv_afiliado}",
    "verificacion": {
      "identificacion_proveedor": "{identificacion_proveedor}",
      "fecha_verificacion": "{fecha_verificacion}",
      "url_verificacion": "{host}/services/previred/{serviceTransactionId}/certificate?token={token}&apiKey={previredApiKey}",
      "url_usuario": "{username}",
      "url_clave": "{password}",
      "tipo_verificacion": "{tipo_verificacion}",
      "codigo_verificacion": "{codigo_verificacion}"
    }
  },
  "codigo_institucion": "{codigo_institucion}",
  "requiere_segunda_verificacion": false
}

The field codigo_verificacion must comply with Previred's restrictions, so it is generated from the serviceTransactionId in URL-safe Base64 format. For more details, see the section UUID format for Previred.

Response example:

{
  "respuesta": {
    "codigo": 200,
    "mensaje": "Ticket generated successfully",
    "ticket_tvi": "17416257523259999232077343926588:...",
    "fecha": "20250310 135552",
    "errores": []
  }
}

Call to Previred - Get token

POST {baseUrlPrevired}/tvi/obtenerTokenWS

Request example:

{
  "codigo_institucion": "9999",
  "ticket_tvi": "{ticket_tvi}"
}

Response example:

{
  "respuesta": {
    "codigo": 200,
    "mensaje": "OK",
    "token": "2N/BNwHs6kMlVKKEPsFi6fpPjf5I/x0X+IFKFk/EhWZn3vQIvY4FQbORNpzPpOFsO7Gp/jiiCzhE5EnLgjSTUg==",
    "fecha": "20250310 135555",
    "errores": []
  }
}

---

UUID format for Previred

Previred imposes a 30-character limit on codigo_verificacion. UUIDs (36 characters) are converted to URL-safe Base64 without padding.

UUID to URL-safe Base64 conversion

Example:

Original UUID	Converted UUID
3994d0f4-77c2-4079-8fd3-ccd14e90f909	OTlEbw93wkCeNMzNF5D5CQ

Implementation in Go:

import (
    "encoding/base64"
    "github.com/google/uuid"
)

func ShortID(ID string) string {
    tID := uuid.MustParse(ID)
    marshalled, _ := tID.MarshalBinary()
    return base64.RawURLEncoding.EncodeToString(marshalled)
}

This method guarantees uniqueness and compliance with Previred. It must be applied consistently.