Skip to main content
POST
Signal Redirect Returned

Authorizations

Authorization
string
header
required

API key of the form ec_(live|test). Scopes are listed per operation.

Headers

X-Signature
string
required

HMAC-SHA256 signature over method, path, timestamp, nonce and raw body.

X-Timestamp
string
required

Unix epoch seconds. Requests outside the tolerance window are rejected.

X-Nonce
string
required

Unique per-request nonce. Replays are rejected.

Path Parameters

journeyId
string
required

Body

application/json

Signal that the customer has returned from a hosted redirect step.

kind
enum<string>
required

The redirect step that was completed.

Available options:
KYC,
MANDATE,
ESIGN

Response

Success

success
boolean
required
data
object
required