Acreditar y validar accesos

curl -X POST https://api.ventry.es/v1/tickets/TR-84213-001/check-in \
  -H "Authorization: Bearer $VENTRY_KEY" \
  -H "Idempotency-Key: 7c9e6679-7425-40de-944b-e07fc1f90ae7" \
  -H "Content-Type: application/json" \
  -d '{
    "wristband": { "nfc": "04A2B1C3D4E580", "uhf": "E28068940000501234567890" },
    "originality_signature": "3045022100AB...",
    "originality_verified": true
  }'

await fetch("https://api.ventry.es/v1/tickets/TR-84213-001/check-in", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VENTRY_KEY}`,
    "Idempotency-Key": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    wristband: { nfc: "04A2B1C3D4E580", uhf: "E28068940000501234567890" },
    originality_signature: "3045022100AB...",
    originality_verified: true,
  }),
});

requests.post(
    "https://api.ventry.es/v1/tickets/TR-84213-001/check-in",
    headers={
        "Authorization": f"Bearer {os.environ['VENTRY_KEY']}",
        "Idempotency-Key": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    },
    json={
        "wristband": {"nfc": "04A2B1C3D4E580", "uhf": "E28068940000501234567890"},
        "originality_signature": "3045022100AB...",
        "originality_verified": True,
    },
    timeout=15,
)

<?php
callVentry("POST", "/tickets/TR-84213-001/check-in", [
    "headers" => [
        "Idempotency-Key: 7c9e6679-7425-40de-944b-e07fc1f90ae7",
        "Content-Type: application/json",
    ],
    "body" => json_encode([
        "wristband" => [
            "nfc" => "04A2B1C3D4E580",
            "uhf" => "E28068940000501234567890",
        ],
        "originality_signature" => "3045022100AB...",
        "originality_verified" => true,
    ]),
]);

curl -X POST https://api.ventry.es/v1/access-checks \
  -H "Authorization: Bearer $VENTRY_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "wristband_code": "04A2B1C3D4E580",
    "zone": "6a3d2a6ea1e963300ee2c99d"
  }'

const check = await (
  await fetch("https://api.ventry.es/v1/access-checks", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.VENTRY_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      wristband_code: "04A2B1C3D4E580",
      zone: "6a3d2a6ea1e963300ee2c99d",
    }),
  })
).json();

check = requests.post(
    "https://api.ventry.es/v1/access-checks",
    headers={"Authorization": f"Bearer {os.environ['VENTRY_KEY']}"},
    json={
        "wristband_code": "04A2B1C3D4E580",
        "zone": "6a3d2a6ea1e963300ee2c99d",
    },
    timeout=10,
).json()

$check = callVentry("POST", "/access-checks", [
    "headers" => ["Content-Type: application/json"],
    "body" => json_encode([
        "wristband_code" => "04A2B1C3D4E580",
        "zone" => "6a3d2a6ea1e963300ee2c99d",
    ]),
]);

const VENTRY = "https://api.ventry.es/v1";
const headers = {
  Authorization: `Bearer ${process.env.VENTRY_KEY}`,
  "Content-Type": "application/json",
};

/** Llamado por tu app de puerta. `scanId` lo genera la app al leer el QR. */
export async function accredit({ ticketCode, nfc, uhf, scanId }) {
  const response = await fetch(`${VENTRY}/tickets/${ticketCode}/check-in`, {
    method: "POST",
    headers: { ...headers, "Idempotency-Key": scanId },
    body: JSON.stringify({ wristband: { nfc, ...(uhf && { uhf }) } }),
  });

  if (response.ok) {
    return { ok: true, wristband: (await response.json()).wristband };
  }

  const { error } = await response.json();

  switch (error.code) {
    case "ticket_already_claimed":
      return { ok: false, escalate: true, message: "Ya acreditada. Avisa a un supervisor." };
    case "wristband_in_use":
      return { ok: false, retryable: true, message: "Pulsera en uso. Coge otra." };
    case "ticket_not_found":
      return { ok: false, message: "Entrada no válida." };
    default:
      return { ok: false, message: error.message, requestId: error.request_id };
  }
}

export async function canEnterZone(nfc, zoneId) {
  const response = await fetch(`${VENTRY}/access-checks`, {
    method: "POST",
    headers,
    body: JSON.stringify({ wristband_code: nfc, zone: zoneId }),
  });

  // Un fallo aquí es un fallo de la integración, no una denegación: no lo
  // conviertas en "no pasa" sin distinguirlo, o un token caducado cerrará la
  // puerta a todo el mundo.
  if (!response.ok) throw new Error("VENTRY no disponible");

  return response.json();
}

import os, requests

VENTRY = "https://api.ventry.es/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['VENTRY_KEY']}"}

def accredit(ticket_code, nfc, scan_id, uhf=None):
    """Llamado por tu app de puerta. `scan_id` lo genera la app al leer el QR."""
    wristband = {"nfc": nfc}
    if uhf:
        wristband["uhf"] = uhf

    response = requests.post(
        f"{VENTRY}/tickets/{ticket_code}/check-in",
        headers={**HEADERS, "Idempotency-Key": scan_id},
        json={"wristband": wristband},
        timeout=15,
    )

    if response.ok:
        return {"ok": True, "wristband": response.json()["wristband"]}

    error = response.json()["error"]

    if error["code"] == "ticket_already_claimed":
        return {"ok": False, "escalate": True,
                "message": "Ya acreditada. Avisa a un supervisor."}
    if error["code"] == "wristband_in_use":
        return {"ok": False, "retryable": True,
                "message": "Pulsera en uso. Coge otra."}
    if error["code"] == "ticket_not_found":
        return {"ok": False, "message": "Entrada no válida."}

    return {"ok": False, "message": error["message"],
            "request_id": error["request_id"]}

def can_enter_zone(nfc, zone_id):
    response = requests.post(
        f"{VENTRY}/access-checks",
        headers=HEADERS,
        json={"wristband_code": nfc, "zone": zone_id},
        timeout=10,
    )

    # Un fallo aquí es un fallo de la integración, no una denegación: no lo
    # conviertas en "no pasa" sin distinguirlo, o un token caducado cerrará la
    # puerta a todo el mundo.
    response.raise_for_status()

    return response.json()

<?php
const VENTRY = "https://api.ventry.es/v1";

/** Llamado por tu app de puerta. $scanId lo genera la app al leer el QR. */
function accredit(string $ticketCode, string $nfc, string $scanId, ?string $uhf = null): array
{
    $wristband = ["nfc" => $nfc];
    if ($uhf !== null) {
        $wristband["uhf"] = $uhf;
    }

    try {
        // callVentry(): ver la implementación en la página de Errores.
        $result = callVentry("POST", "/tickets/$ticketCode/check-in", [
            "headers" => [
                "Idempotency-Key: $scanId",
                "Content-Type: application/json",
            ],
            "body" => json_encode(["wristband" => $wristband]),
        ]);

        return ["ok" => true, "wristband" => $result["wristband"]];
    } catch (VentryApiError $e) {
        return match ($e->code) {
            "ticket_already_claimed" => [
                "ok" => false,
                "escalate" => true,
                "message" => "Ya acreditada. Avisa a un supervisor.",
            ],
            "wristband_in_use" => [
                "ok" => false,
                "retryable" => true,
                "message" => "Pulsera en uso. Coge otra.",
            ],
            "ticket_not_found" => ["ok" => false, "message" => "Entrada no válida."],
            default => [
                "ok" => false,
                "message" => $e->getMessage(),
                "request_id" => $e->requestId,
            ],
        };
    }
}

function canEnterZone(string $nfc, string $zoneId): array
{
    // Un fallo aquí es un fallo de la integración, no una denegación: no lo
    // conviertas en "no pasa" sin distinguirlo, o un token caducado cerrará la
    // puerta a todo el mundo.
    return callVentry("POST", "/access-checks", [
        "headers" => ["Content-Type: application/json"],
        "body" => json_encode(["wristband_code" => $nfc, "zone" => $zoneId]),
    ]);
}