KYC Session Expired

{
  "eventId": "8f85f3fd-4d95-47f9-9eb4-95ef7b9950f1",
  "eventType": "kyc_session_expired",
  "timestamp": "2026-03-17T16:58:41.204Z",
  "data": {
    "sessionId": "b67d60c6-2e30-4e5d-b76d-78bb2f3e2af4",
    "userId": "37caee35-e19b-4d6d-96bb-3c4f33f3dd5b",
    "entityType": "user"
  }
}

{
  "eventId": "6ff6ff9d-0918-4858-86e8-8c12aef6e4b5",
  "eventType": "kyc_session_expired",
  "timestamp": "2026-03-17T17:02:10.088Z",
  "data": {
    "sessionId": "0d050f52-36a1-4bb8-a45d-b89b801d640d",
    "relatedPartyId": "58c4c281-275f-497e-81d5-8bc9975b2380",
    "entityType": "related-party"
  }
}

app.post('/webhooks/ralio', async (req, res) => {
  const { eventType, data } = req.body;

  if (eventType === 'kyc_session_expired') {
    const { sessionId, entityType, userId, relatedPartyId } = data;
    const subjectId = userId ?? relatedPartyId;

    console.log(`KYC session ${sessionId} expired for ${entityType} ${subjectId}`);

    await updateKycSessionStatus(sessionId, 'EXPIRED');

    if (entityType === 'user' && userId) {
      await notifyUserSessionExpired(userId);
    }

    if (entityType === 'related-party' && relatedPartyId) {
      await notifyRelatedPartySessionExpired(relatedPartyId);
    }

    res.status(200).json({ received: true });
  }
});

@app.route('/webhooks/ralio', methods=['POST'])
def handle_webhook():
    payload = request.get_json()

    if payload['eventType'] == 'kyc_session_expired':
        data = payload['data']
        session_id = data['sessionId']
        entity_type = data['entityType']
        user_id = data.get('userId')
        related_party_id = data.get('relatedPartyId')
        subject_id = user_id or related_party_id

        print(f"KYC session {session_id} expired for {entity_type} {subject_id}")

        update_kyc_session_status(session_id, 'EXPIRED')

        if entity_type == 'user' and user_id:
            notify_user_session_expired(user_id)

        if entity_type == 'related-party' and related_party_id:
            notify_related_party_session_expired(related_party_id)

        return jsonify({'received': True}), 200

func handleWebhook(w http.ResponseWriter, r *http.Request) {
    var payload struct {
        EventType string `json:"eventType"`
        Data  struct {
            SessionID      string `json:"sessionId"`
            UserID         string `json:"userId"`
            RelatedPartyID string `json:"relatedPartyId"`
            EntityType     string `json:"entityType"`
        } `json:"data"`
    }

    if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
        http.Error(w, "Invalid JSON", http.StatusBadRequest)
        return
    }

    if payload.EventType == "kyc_session_expired" {
        subjectID := payload.Data.UserID
        if subjectID == "" {
            subjectID = payload.Data.RelatedPartyID
        }

        log.Printf("KYC session %s expired for %s %s", payload.Data.SessionID, payload.Data.EntityType, subjectID)

        if err := updateKycSessionStatus(payload.Data.SessionID, "EXPIRED"); err != nil {
            http.Error(w, "Internal error", http.StatusInternalServerError)
            return
        }

        if payload.Data.EntityType == "user" && payload.Data.UserID != "" {
            if err := notifyUserSessionExpired(payload.Data.UserID); err != nil {
                http.Error(w, "Internal error", http.StatusInternalServerError)
                return
            }
        }

        if payload.Data.EntityType == "related-party" && payload.Data.RelatedPartyID != "" {
            if err := notifyRelatedPartySessionExpired(payload.Data.RelatedPartyID); err != nil {
                http.Error(w, "Internal error", http.StatusInternalServerError)
                return
            }
        }

        w.Header().Set("Content-Type", "application/json")
        w.WriteHeader(http.StatusOK)
        json.NewEncoder(w).Encode(map[string]bool{"received": true})
    }
}