Some sites need a little more than "a unique, verified person". With the person's agreement, Human Pass can also tell you whether they're 21 or over, and which country and state issued their ID. Never their birth date or address.
What you can ask for
| Scope | Claim | Value |
|---|---|---|
age | age_over_21 | true or false |
id_country | id_issuing_country | The country that issued the ID, ISO 3166-1 alpha-2, e.g. US |
id_state | id_issuing_subdivision | The state or province that issued a licence or state ID, ISO 3166-2, e.g. US-CA. Only with id_country. |
Enabling them
Attributes are add-ons, priced separately, and off for every project until we enable them for it. Tell us which ones your project needs and why; we'll enable them in the sandbox first.
Asking for them
Add the scopes to your authorization request:
scope: "openid personhood age id_country id_state"- The person sees each item on the consent screen for your site, and can agree or not. They decide once per site.
- If they don't agree, the claim is absent: not
false. Treat absent as "unknown". id_stateon its own gets nothing: ask forid_countrytoo.- Asking for more later (for example adding age) asks the person only about the new item.
- Scopes your project isn't enabled for are ignored, and the person isn't asked about them.
What the values mean
age_over_21: from the birth date on the ID, checked when the person verified. For people under 21, it turns true on the last day of the month they turn 21; once true, it stays true. (Everyone with a Human Pass is 18 or over.)id_issuing_countryandid_issuing_subdivision: who issued the ID, not where the person lives. A Californian with a Texas licence isUS-TX. Passports have no state. The most recently verified document sets them.