Fingerprint API (Beta)

The Fingerprint API allows you to generate a unique device fingerprint directly from your frontend application. This fingerprint helps enhance fraud detection when used in combination with the User Trust API.

Important

The Fingerprint API must be called from the frontend (client-side), not from your backend server. This ensures accurate device identification.

Use the following cURL command to generate a fingerprint:

curl -X POST "https://api.autheona.com/v1/fingerprint" \
  -H "Content-Type: application/json" \
  -H "x-api-key: <public-api-key>" \
  -d '{}'

Endpoint

POST https://api.autheona.com/v1/fingerprint

Authentication

To authenticate your request, include your public API key in the header:

Header	Value
`x-api-key`	`YOUR_PUBLIC_API_KEY`

Note

Unlike the User Trust API which requires a private API key, the Fingerprint API uses a public API key. Public API keys are safe to expose in frontend code.

Request Body

The Fingerprint API accepts an empty request body:

Parameter	Type	Required	Description
(none)	-	No	No parameters required for fingerprint generation

Example Request

{}

Response

The API returns a JSON object containing the encrypted fingerprint data.

Response Structure

{
  "fingerprint": "<ENCRYPTED-FINGERPRINT-DATA>"
}

Response Fields

Field	Type	Description
`fingerprint`	`string`	Encrypted fingerprint data to be passed to the User Trust API

Example Response

{
  "fingerprint": "eyJmaW5nZXJwcmludCI6ICJhYmNkLTEyMzQifQ==..."
}

Status Codes

Status Code	Details
`200`	Fingerprint generated successfully
`401`	Invalid or missing API key
`429`	Rate limit exceeded
`500`	Internal server error

Using Fingerprint with User Trust API

To leverage fingerprint data for enhanced fraud detection, pass the fingerprint value returned by the Fingerprint API to the User Trust API.

Example Integration

Step 1: Generate fingerprint from frontend:

// Client-side JavaScript

const response = await fetch("https://api.autheona.com/v1/fingerprint", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "x-api-key": "your-public-api-key",
  },
  body: "{}",
});

const { fingerprint } = await response.json();

Step 2: Pass fingerprint to User Trust API:

Note

To pass fingerprint data, you need to send it to the backend through the API you're already using in the system.

curl -X POST "https://api.autheona.com/v1/intelligence" \
  -H "Content-Type: application/json" \
  -H "x-api-key: <private-access-token>" \
  -d '{
    "email_address": "user@example.com",
    "fingerprint": "<ENCRYPTED-FINGERPRINT-DATA>"
  }'

Request Body with Fingerprint

Parameter	Type	Required	Description
`email_address`	`string`	Yes	The email address to be validated/analyzed
`fingerprint`	`string`	Yes	The fingerprint data from the Fingerprint API response

Rate Limiting

The Fingerprint API has the same rate limits as the User Trust API.

Policy Engine Integration

Once fingerprint data is passed to the User Trust API, you can use fingerprint-related validations in your Policy Engine rules. This enables:

Detection of multiple accounts from the same device
Identification of suspicious device patterns
Enhanced fraud scoring based on device characteristics

For more information on configuring fingerprint rules, see the Policy Engine documentation.