NICE Identity Verification S2S MigrationAuth API migration
Migrated identity verification to the new unified S2S API and shipped it to production
Role
Backend development
Period
2026.05
Status
Production switch complete
Stack
Node.js, PBKDF2, AES-GCM, NICE API
What I built
The migration of NICE identity verification to the new unified S2S API: access-token issuance, encrypted-token request, PBKDF2-based key derivation, AES-GCM request encryption, and response decryption with integrity checks.
Pitfalls
Where the spec and actual behavior differed: key-derivation inputs, encoding, tag handling: each point was reconciled by measurement and written down so the next person does not repeat the trial and error.
Status
Production switch completed on 2026-05-08; a follow-up fix was deployed on May 12.