@finap/sdk-browser
Browser identity flow
Understand the browser agent, the server exchange, and the safe production boundary.
01
How identification works
- 01
Collect
The browser agent collects a Fingerprint event and returns an event_id.
- 02
Exchange
Your server sends that event ID to POST /identify as requestId.
- 03
Resolve
FINAP queries the provider with its server-held secret and returns normalized identity and risk data.
- 04
Enrich
Your server can retrieve full event details and visitor history when needed.
02
Recommended production pattern
Run the collection agent in the browser, but keep your FINAP fn_ key on your server. Send only the provider event ID to your own backend, then call FINAP from there.
const response = await fetch(
"https://api.finap.uk/api/v1/identify",
{
method: "POST",
headers: {
"Authorization": `Bearer ${process.env.FINAP_API_KEY}`,
"Content-Type": "application/json",
},
body: JSON.stringify({ requestId }),
},
);