# Check holder data with eID assertion

Validates holder data using an eID assertion before enrolling. Checks: mandatory fields, allowed values, LRA authorization for the eID type. See checkDataWitheIDAssertion and How to enroll with eID assertion.

Endpoint: POST /api/certificate/{lraId}/checkDataWitheIDAssertion
Version: 26.1.0.3
Security: basicAuth, sslCertificate

## Path parameters:

  - `lraId` (string, required)
    Local Registration Authority (LRA) identifier.

## Request fields (application/json):

  - `eidAssertionHolder` (object, required)
    eID assertion holder data. Contains the eID type, country, and base64-encoded assertion.

  - `eidAssertionHolder.country` (string, required)
    Country code of the eID provider. ISO 3166-1 alpha-2 code. Together with eIDType identifies the eID method (e.g., IT-SPID, IT-EIDNAMIRIAL, AT-EID).
    Example: "IT"

  - `eidAssertionHolder.eIDType` (string, required)
    Type of eID assertion. Together with country identifies the eID method (e.g., IT-SPID, IT-EIDNAMIRIAL, AT-EID). Allowed values depend on LRA configuration.
    Example: "SPID"

  - `eidAssertionHolder.assertion` (string, required)
    Base64-encoded eID assertion. The format depends on eIDType.

  - `certificate` (object, required)
    Certificate configuration. Specifies password, security code, certificate type, and OTP type.

  - `certificate.password` (string, required)
    Certificate PIN.

  - `certificate.securityCode` (string, required)
    Certificate security code.

  - `certificate.fullData` (boolean)
    Enroll with full profile. Default: false.

  - `certificate.withoutUsageLimitLRA` (boolean)
    Omit LRA limitation of use (LoU). Default: false.

  - `certificate.type` (string)
    Disposable certificate type.
    Enum: "DISPOSABLE", "DISPOSABLE_30_DAYS", "LONG_LIVED", "DISPOSABLE_FEA"

  - `certificate.otpType` (string)
    OTP delivery method. See [allowed values](https://docs.namirial.app/products/leandisposable/enterprise-documentation/developer-documentation/api-references/lean-enum-types#disposableotptype). Default: SMS.
    Enum: "SMS", "EMAIL", "NO_OTP", "EXTERNAL_OTP"

  - `certificate.transactionLimit` (object)

  - `certificate.transactionLimit.value` (integer)
    Maximum transaction value.

  - `certificate.transactionLimit.currency` (string)
    Currency code. ISO 4217.

  - `certificate.limitationOfUse` (object)

  - `certificate.limitationOfUse.withoutUsageLimitLRA` (boolean)
    Omit LRA limitation of use. Default: false.

  - `certificate.limitationOfUse.language` (string)
    Language of the limitation of use text. ISO 639-1 alpha-2 code.

  - `contacts` (object)
    Contact information. Required if certificate.otpType=SMS (provide mobile) or certificate.otpType=EMAIL (provide email).

  - `contacts.email` (string)
    Email address of the holder. Required if otpType=EMAIL.

  - `contacts.mobile` (string)
    Mobile phone number in E.164 format with + prefix (e.g. +390000000000). Required if otpType=SMS.

  - `buReId` (string)
    Business relation identifier (optional).

## Response 500 fields (application/json):

  - `code` (integer, required)
    Application error code.
    Example: 242

  - `message` (string, required)
    Human-readable error description. For validation errors (code 242), includes field-level details in the format Input parameter invalid: [{field=..., message=...}].
    Example: "Input parameter invalid: [{field=disposableHolder, message=must not be null}]"


## Response 200 fields