POST web/admin/swipecheckin/verifymemberqr
IM-CredentialAuthenticity (card-reader plan §4.3, item 3): verify a SCANNED member-QR's signature WITHOUT checking anyone in — for the POS register, which pre-fills a member lookup from a scan and must refuse to attach a sale to a forged/replayed pass under enforcement. Body: { schoolId, memberId, sig }. School-admin gated. Returns { enforced, verified, verdict }. The verdict is only a CATEGORY (never the sig / key) so nothing sensitive is echoed back.
Request Information
Parameters
| Name | Description | Additional information |
|---|---|---|
| inVO | No documentation available. |
Define this parameter in the request body. |
Request body formats
application/json, text/json
Sample:
{
"memberId": "sample string 1",
"sig": "sample string 2",
"schoolId": "sample string 3",
"curUserId": "sample string 4",
"isSSO": true,
"requestHost": "sample string 6",
"applicationPath": "sample string 7",
"secureApplicationPath": "sample string 8",
"absoluteApplicationPath": "sample string 9",
"isHttps": true,
"isMobileDevice": true,
"isElectron": true,
"isFullEmbed": true,
"clientType": 0,
"clientVersion": "sample string 14",
"clientOS": "sample string 15",
"clientBuild": "sample string 16",
"premiumAppId": "sample string 17",
"clientWidth": 18,
"clientHeight": 19,
"timezone": 20
}
application/xml, text/xml
Sample:
<CredentialVerifyMemberInVO xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/imLeagues.Internal.API.VO.Input"> <ClientHeight>19</ClientHeight> <ClientType>Site</ClientType> <ClientWidth>18</ClientWidth> <absoluteApplicationPath>sample string 9</absoluteApplicationPath> <applicationPath>sample string 7</applicationPath> <cachedKey>sample string 1</cachedKey> <clientBuild>sample string 16</clientBuild> <clientOS>sample string 15</clientOS> <clientVersion>sample string 14</clientVersion> <curUserId>sample string 4</curUserId> <isElectron>true</isElectron> <isFullEmbed>true</isFullEmbed> <isHttps>true</isHttps> <isMobileDevice>true</isMobileDevice> <isSSO>true</isSSO> <premiumAppId>sample string 17</premiumAppId> <requestHost>sample string 6</requestHost> <secureApplicationPath>sample string 8</secureApplicationPath> <timezone>20</timezone> <SchoolId>sample string 3</SchoolId> <MemberId>sample string 1</MemberId> <Sig>sample string 2</Sig> </CredentialVerifyMemberInVO>
application/x-www-form-urlencoded
Sample:
Sample not available.
multipart/form-data
Sample:
--MultipartDataMediaFormatterBoundary1q2w3e Content-Disposition: form-data; name="cachedKey" sample string 1 --MultipartDataMediaFormatterBoundary1q2w3e--
Response Information
No documentation available.
Response body formats
application/json, text/json
Sample:
{
"isDone": true,
"code": 0,
"message": "sample string 2",
"data": {},
"cachedKey": "sample string 4",
"correlationId": "f9b9cb36-32e7-4264-a16d-beeab213da69",
"jwtTokenForSPA": "sample string 6",
"jwtTokenIndexForSPA": 1
}
application/xml, text/xml
Sample:
<ResultOutVO xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/imLeagues.Internal.API.VO.Output.Common"> <CachedKey>sample string 4</CachedKey> <Code>None</Code> <CorrelationId>f9b9cb36-32e7-4264-a16d-beeab213da69</CorrelationId> <Data /> <IsDone>true</IsDone> <JwtTokenForSPA>sample string 6</JwtTokenForSPA> <JwtTokenIndexForSPA>1</JwtTokenIndexForSPA> <Message>sample string 2</Message> </ResultOutVO>
multipart/form-data
Sample:
Sample not available.