gabrielmoreira persona security basics | sed 's/\b(.)/\u\1/g'
Overview
API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.
Prerequisites
- Completed
persona-install-authsetup - Valid Persona API key (sandbox or production)
Instructions
Step 1: Implementation
import os, requests
HEADERS = {
"Authorization": f"Bearer {os.environ['PERSONA_API_KEY']}",
"Persona-Version": "2023-01-05",
}
BASE = "https://withpersona.com/api/v1"
# Secure Persona API keys, webhook secrets, PII handling in verification data
resp = requests.get(f"{BASE}/inquiries?page[size]=10", headers=HEADERS)
resp.raise_for_status()
inquiries = resp.json()["data"]
for inq in inquiries:
print(f" {inq['id']}: {inq['attributes']['status']}")
Output
- API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.
Error Handling
| Error | Cause | Solution |
|---|---|---|
| 401 Unauthorized | Invalid API key | Check PERSONA_API_KEY |
| 429 Rate Limited | Too many requests | Implement backoff |
| 404 Not Found | Wrong resource ID | Verify ID format |
Resources
Next Steps
See related Persona skills for more workflows.