Feature/identity provider abstraction

.env.example

@@ -57,22 +57,46 @@ PORT="3001"
 # Defaults to allowing all origins when unset.
 THALOS_CORS_ORIGIN="http://localhost:3000"
 
-# Public base URL of the frontend app, used to build links in outgoing emails
-# (e.g. contact invites). Falls back to the first THALOS_CORS_ORIGIN, then
-# http://localhost:3000 when unset.
-THALOS_APP_PUBLIC_URL="http://localhost:3000"
-
-# ---- Stellar / Trustless Work defaults (optional) -----------
-# All have built-in testnet defaults; override for mainnet / a different setup.
-
-# Stellar network the wallets/escrows run on: "testnet" (default) or "mainnet".
-STELLAR_NETWORK="testnet"
-
-# Platform (fee/owner) Stellar address used when creating escrows.
-PLATFORM_ADDRESS="GBTTKTSBLHGMRY3T65JXT423MHQZXTD26TTHQEY5HNF2KWFFDKKVHVPD"
-
-# Default dispute resolver Stellar address for new escrows.
-DISPUTE_RESOLVER="GB6MP3L6UGIDY6O6MXNLSKHLXT2T2TCMPZIZGUTOGYKOLHW7EORWMFCK"
-
-# USDC trustline (asset issuer) address used for escrow funding.
-TRUSTLINE_USDC_ADDRESS="GBBD47IF6LWK7P7MDEVSCWR7DPUWV3NY3DTQEVFL4NAT4AQH3ZLLFLA5"
+# ---- Identity Verification (KYC/KYB) ------------------------
+# Provider-agnostic identity verification layer. The active provider is
+# selected here; per-provider credentials follow the convention
+# <PROVIDER>_API_KEY / <PROVIDER>_API_SECRET / <PROVIDER>_BASE_URL /
+# <PROVIDER>_WEBHOOK_SECRET so new vendors can be added without code changes.
+
+# Default provider used when a request does not specify one.
+# One of: mock | sumsub | persona | veriff | synaps | stripe_identity | alloy
+# Defaults to "mock" (safe for local/dev/test) when unset.
+VERIFICATION_PROVIDER="mock"
+
+# --- Sumsub ---
+# SUMSUB_API_KEY=""
+# SUMSUB_API_SECRET=""
+# SUMSUB_BASE_URL="https://api.sumsub.com"
+# SUMSUB_WEBHOOK_SECRET=""
+
+# --- Persona ---
+# PERSONA_API_KEY=""
+# PERSONA_BASE_URL="https://withpersona.com/api/v1"
+# PERSONA_WEBHOOK_SECRET=""
+
+# --- Veriff ---
+# VERIFF_API_KEY=""
+# VERIFF_API_SECRET=""
+# VERIFF_BASE_URL="https://stationapi.veriff.com"
+# VERIFF_WEBHOOK_SECRET=""
+
+# --- Synaps ---
+# SYNAPS_API_KEY=""
+# SYNAPS_BASE_URL="https://api.synaps.io"
+# SYNAPS_WEBHOOK_SECRET=""
+
+# --- Stripe Identity ---
+# STRIPE_IDENTITY_API_KEY=""
+# STRIPE_IDENTITY_BASE_URL="https://api.stripe.com"
+# STRIPE_IDENTITY_WEBHOOK_SECRET=""
+
+# --- Alloy ---
+# ALLOY_API_KEY=""
+# ALLOY_API_SECRET=""
+# ALLOY_BASE_URL="https://sandbox.alloy.co"
+# ALLOY_WEBHOOK_SECRET=""

src/app.module.ts

@@ -16,6 +16,7 @@ import { ProfilesModule } from './profiles/profiles.module';
 import { WalletsModule } from './wallets/wallets.module';
 import { EventsModule } from './events/events.module';
 import { WebhooksModule } from './webhooks/webhooks.module';
+import { VerificationModule } from './verification/verification.module';
 
 @Module({
   imports: [
@@ -35,6 +36,7 @@ import { WebhooksModule } from './webhooks/webhooks.module';
     WalletsModule,
     EventsModule,
     WebhooksModule,
+    VerificationModule,
   ],
   controllers: [RootController],
 })