Age-gate a checkout

​

The workspace

• Facial age estimation for the lightest check: a selfie, with a document only when the estimate cannot confirm the buyer is 18+.
• Age verification by ID document when your rules require a document, or a minimum age other than 18 (16 to 25).

​

Steps

const verification = await client.verifications().create({
  external_id: String(user.id),
  callback_url: 'https://shop.example/checkout?verified=1',
  external_metadata: { cart_id: cart.id },
});

export const POST = webhookHandler(async (event) => {
  if (event.status === 'approved') {
    await users.markAgeVerified(event.external_id, event.verification_id);
  }
  if (event.status === 'declined') {
    await users.markAgeCheckFailed(event.external_id, event.reason);
  }
});

​

What to store

• On the user: that they are age-verified, when, and the verification_id.
• On each restricted order: the verification_id that allowed it, as evidence for an audit.

​

Edge cases

• The buyer closes the widget. Nothing changes; the next checkout attempt opens the same verification if it is still open, or you create a new one after it is abandoned or expired.
• Resubmission requested. The widget asks the buyer to retake the image in the same verification; wait for the next webhook. See Handle a resubmission.
• Declined as underage. verification.age_threshold.failed: refuse the order. Do not offer an immediate new verification.
• Guest checkout. Use the order ID or the email as external_id, and verify per order instead of per account.