persona-security-basics

persona security basics | sed 's/\b(.)/\u\1/g'

Overview

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Prerequisites

• Completed persona-install-auth setup
• Valid Persona API key (sandbox or production)

Instructions

Step 1: Implementation

import os, requests

HEADERS = {
    "Authorization": f"Bearer {os.environ['PERSONA_API_KEY']}",
    "Persona-Version": "2023-01-05",
}
BASE = "https://withpersona.com/api/v1"

# Secure Persona API keys, webhook secrets, PII handling in verification data
resp = requests.get(f"{BASE}/inquiries?page[size]=10", headers=HEADERS)
resp.raise_for_status()
inquiries = resp.json()["data"]
for inq in inquiries:
    print(f"  {inq['id']}: {inq['attributes']['status']}")

Output

• API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Error Handling

Error	Cause	Solution
401 Unauthorized	Invalid API key	Check PERSONA_API_KEY
429 Rate Limited	Too many requests	Implement backoff
404 Not Found	Wrong resource ID	Verify ID format

Resources

• Persona API Reference
• Persona Documentation

Next Steps

See related Persona skills for more workflows.