Resend the verification SMS (rate-limited, attempt-capped, SMS-bomb guarded)

curl --request POST \
  --url https://api.feddi.io/v1/partner/enroll/resend \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "meta": {
    "partner_request_id": "3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f",
    "occurred_at": "2026-06-05T09:50:00Z",
    "sent_at": "2026-06-05T09:50:00Z",
    "api_version": "2026-06-01"
  },
  "context": {
    "merchant_id": "11111111-1111-1111-1111-111111111111",
    "branch_id": "22222222-2222-2222-2222-222222222222",
    "terminal_id": "POS-360-0007"
  },
  "wallet_user_id": "wu_aa01",
  "phone": null
}
'

import requests

url = "https://api.feddi.io/v1/partner/enroll/resend"

payload = {
    "meta": {
        "partner_request_id": "3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f",
        "occurred_at": "2026-06-05T09:50:00Z",
        "sent_at": "2026-06-05T09:50:00Z",
        "api_version": "2026-06-01"
    },
    "context": {
        "merchant_id": "11111111-1111-1111-1111-111111111111",
        "branch_id": "22222222-2222-2222-2222-222222222222",
        "terminal_id": "POS-360-0007"
    },
    "wallet_user_id": "wu_aa01",
    "phone": None
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    meta: {
      partner_request_id: '3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f',
      occurred_at: '2026-06-05T09:50:00Z',
      sent_at: '2026-06-05T09:50:00Z',
      api_version: '2026-06-01'
    },
    context: {
      merchant_id: '11111111-1111-1111-1111-111111111111',
      branch_id: '22222222-2222-2222-2222-222222222222',
      terminal_id: 'POS-360-0007'
    },
    wallet_user_id: 'wu_aa01',
    phone: null
  })
};

fetch('https://api.feddi.io/v1/partner/enroll/resend', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.feddi.io/v1/partner/enroll/resend",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'meta' => [
        'partner_request_id' => '3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f',
        'occurred_at' => '2026-06-05T09:50:00Z',
        'sent_at' => '2026-06-05T09:50:00Z',
        'api_version' => '2026-06-01'
    ],
    'context' => [
        'merchant_id' => '11111111-1111-1111-1111-111111111111',
        'branch_id' => '22222222-2222-2222-2222-222222222222',
        'terminal_id' => 'POS-360-0007'
    ],
    'wallet_user_id' => 'wu_aa01',
    'phone' => null
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.feddi.io/v1/partner/enroll/resend"

	payload := strings.NewReader("{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.feddi.io/v1/partner/enroll/resend")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.feddi.io/v1/partner/enroll/resend")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}"

response = http.request(request)
puts response.read_body

{
  "ok": true,
  "data": {
    "wallet_user_id": "wu_aa01",
    "verification_sent": true,
    "verification_expires_at": "2026-06-05T10:20:00Z",
    "sends_used_24h": 2,
    "sends_remaining_24h": 1,
    "next_send_allowed_at": "2026-06-05T09:51:00Z"
  },
  "error": null,
  "meta": {
    "request_id": "req_rs1",
    "idempotency_replayed": false,
    "api_version": "2026-06-01"
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": false,
  "data": null,
  "error": {
    "code": "RATE_LIMITED",
    "message": "Verification SMS resend rate limit reached. Try again later.",
    "details": {
      "retry_after_seconds": 41,
      "sends_used_24h": 3,
      "cap_24h": 3
    }
  },
  "meta": {
    "request_id": "req_rs9",
    "idempotency_replayed": false,
    "api_version": "2026-06-01"
  }
}

enrollment

Resend the verification SMS (rate-limited, attempt-capped, SMS-bomb guarded)

Resends the enrollment verification SMS for a customer whose wallet identity is still in the PENDING_PROOF state. This is a transactional message and is not subject to a marketing consent gate.

Identify the target by wallet_user_id or by phone (E.164, normalized identically to the enrollment-initiate request).

The target must be in PENDING_PROOF. A wallet identity that is already VERIFIED needs no further verification link and is rejected with VALIDATION_ERROR.

Send limits: a maximum of 3 sends per rolling 24-hour window, with a minimum interval of 60 seconds between sends. Each successful resend mints a fresh single-use verification token and invalidates the previously issued token. A send that exceeds the per-window cap is rejected with details.retry_after_seconds indicating when the next send is permitted.

This endpoint is idempotent on the Idempotency-Key header. A retried resend submitted within the 60-second floor replays the prior dispatch rather than counting as a new send.

A target that belongs to a different tenant returns 404.

POST

enroll

resend

Resend the verification SMS (rate-limited, attempt-capped, SMS-bomb guarded)

curl --request POST \
  --url https://api.feddi.io/v1/partner/enroll/resend \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "meta": {
    "partner_request_id": "3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f",
    "occurred_at": "2026-06-05T09:50:00Z",
    "sent_at": "2026-06-05T09:50:00Z",
    "api_version": "2026-06-01"
  },
  "context": {
    "merchant_id": "11111111-1111-1111-1111-111111111111",
    "branch_id": "22222222-2222-2222-2222-222222222222",
    "terminal_id": "POS-360-0007"
  },
  "wallet_user_id": "wu_aa01",
  "phone": null
}
'

import requests

url = "https://api.feddi.io/v1/partner/enroll/resend"

payload = {
    "meta": {
        "partner_request_id": "3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f",
        "occurred_at": "2026-06-05T09:50:00Z",
        "sent_at": "2026-06-05T09:50:00Z",
        "api_version": "2026-06-01"
    },
    "context": {
        "merchant_id": "11111111-1111-1111-1111-111111111111",
        "branch_id": "22222222-2222-2222-2222-222222222222",
        "terminal_id": "POS-360-0007"
    },
    "wallet_user_id": "wu_aa01",
    "phone": None
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    meta: {
      partner_request_id: '3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f',
      occurred_at: '2026-06-05T09:50:00Z',
      sent_at: '2026-06-05T09:50:00Z',
      api_version: '2026-06-01'
    },
    context: {
      merchant_id: '11111111-1111-1111-1111-111111111111',
      branch_id: '22222222-2222-2222-2222-222222222222',
      terminal_id: 'POS-360-0007'
    },
    wallet_user_id: 'wu_aa01',
    phone: null
  })
};

fetch('https://api.feddi.io/v1/partner/enroll/resend', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.feddi.io/v1/partner/enroll/resend",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'meta' => [
        'partner_request_id' => '3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f',
        'occurred_at' => '2026-06-05T09:50:00Z',
        'sent_at' => '2026-06-05T09:50:00Z',
        'api_version' => '2026-06-01'
    ],
    'context' => [
        'merchant_id' => '11111111-1111-1111-1111-111111111111',
        'branch_id' => '22222222-2222-2222-2222-222222222222',
        'terminal_id' => 'POS-360-0007'
    ],
    'wallet_user_id' => 'wu_aa01',
    'phone' => null
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.feddi.io/v1/partner/enroll/resend"

	payload := strings.NewReader("{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.feddi.io/v1/partner/enroll/resend")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.feddi.io/v1/partner/enroll/resend")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"meta\": {\n    \"partner_request_id\": \"3c4d5e6f-0003-4f9b-9d1e-1a2b3c4d5e6f\",\n    \"occurred_at\": \"2026-06-05T09:50:00Z\",\n    \"sent_at\": \"2026-06-05T09:50:00Z\",\n    \"api_version\": \"2026-06-01\"\n  },\n  \"context\": {\n    \"merchant_id\": \"11111111-1111-1111-1111-111111111111\",\n    \"branch_id\": \"22222222-2222-2222-2222-222222222222\",\n    \"terminal_id\": \"POS-360-0007\"\n  },\n  \"wallet_user_id\": \"wu_aa01\",\n  \"phone\": null\n}"

response = http.request(request)
puts response.read_body

{
  "ok": true,
  "data": {
    "wallet_user_id": "wu_aa01",
    "verification_sent": true,
    "verification_expires_at": "2026-06-05T10:20:00Z",
    "sends_used_24h": 2,
    "sends_remaining_24h": 1,
    "next_send_allowed_at": "2026-06-05T09:51:00Z"
  },
  "error": null,
  "meta": {
    "request_id": "req_rs1",
    "idempotency_replayed": false,
    "api_version": "2026-06-01"
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": true,
  "meta": {
    "request_id": "<string>",
    "api_version": "2026-06-01",
    "idempotency_replayed": true,
    "data_completeness_score": 50,
    "decision_trace_id": "<string>",
    "capabilities": {}
  },
  "data": {},
  "error": {
    "message": "<string>",
    "details": {}
  }
}

{
  "ok": false,
  "data": null,
  "error": {
    "code": "RATE_LIMITED",
    "message": "Verification SMS resend rate limit reached. Try again later.",
    "details": {
      "retry_after_seconds": 41,
      "sends_used_24h": 3,
      "cap_24h": 3
    }
  },
  "meta": {
    "request_id": "req_rs9",
    "idempotency_replayed": false,
    "api_version": "2026-06-01"
  }
}

Authorizations

Authorization

string

header

required

POS terminal JWT minted by /auth/token; carries integrationId + terminal/cashier claims (server-trusted).

Headers

Idempotency-Key

string<uuid>

required

Partner-generated UUID; the ONE dedup key for all mutating endpoints. 24h TTL. Same key + same payload -> byte-identical replay; same key + different payload -> IDEMPOTENCY_KEY_REUSED (422).

Body

application/json

Body for POST /enroll/resend. Target by wallet_user_id OR phone (at least one required).

context

object

required

Canonical request context, shared across all partner domains. merchant_id is key-enforced to a merchant the calling credential is authorized for (a platform-scoped credential acts only on its own tenants), so it is never a free-text trust field: a merchant_id outside the credential's authority is rejected rather than honored.

Show child attributes

Response

Fresh verification SMS dispatched (or idempotent replay within the 60s floor).

The standard response envelope that every enveloped endpoint serializes through. ok is a boolean discriminator: when ok is true, the typed result is carried in data; when ok is false, a typed error object is returned instead. The meta object is uniform across the entire API surface.

boolean

required

Overview

Endpoints

Resend the verification SMS (rate-limited, attempt-capped, SMS-bomb guarded)

Authorizations

Headers

Body

Response