KYC integration (MetaKYC SDK)

npm install @asseteragmbh/metakyc

import { MetaKYCSession } from '@asseteragmbh/metakyc';

export async function POST(req: Request) {
  const identitySession = await getValidatedAsseteraSession(req);
  if (!identitySession?.claims.sub) {
    return Response.json({ error: 'not signed in' }, { status: 401 });
  }

  const sdkSession = await MetaKYCSession.createToken({
    baseUrl: process.env.METAKYC_BASE_URL!,
    clientId: process.env.METAKYC_CLIENT_ID!,   // or tenantId
    apiKey: process.env.METAKYC_API_KEY!,       // server only
    secretKey: process.env.METAKYC_SECRET_KEY!, // server only
    externalRefId: identitySession.claims.sub,   // Keycloak sub, read server-side
    workflowKey: 'INDIVIDUAL_KYC',
    email: identitySession.claims.email,
  });

  // Return only what the browser needs
  return Response.json({
    accessToken: sdkSession.accessToken,
    expiresInSeconds: sdkSession.expiresInSeconds,
  });
}

'use client';
import { useEffect, useState } from 'react';
import { MetaKYC, MetaKYCProvider } from '@asseteragmbh/metakyc';

export function KycPage() {
  const [accessToken, setAccessToken] = useState<string>();

  useEffect(() => {
    fetch('/api/kyc/session', { method: 'POST' })
      .then((response) => {
        if (!response.ok) throw new Error('Unable to start verification');
        return response.json();
      })
      .then((session) => setAccessToken(session.accessToken));
  }, []);

  if (!accessToken) return <p>Opening verification...</p>;

  return (
    <MetaKYCProvider
      config={{
        getAccessToken: () => accessToken,
        baseUrl: process.env.NEXT_PUBLIC_METAKYC_BASE_URL!,
        clientId: process.env.NEXT_PUBLIC_METAKYC_CLIENT_ID!,
      }}
    >
      <MetaKYC
        onComplete={(result) => {/* refresh status and route to the next step */}}
        onError={() => {/* show a retry action */}}
      />
    </MetaKYCProvider>
  );
}