getSecretAnswer

🔐 `getSecretAnswer` Event

The getSecretAnswer event is triggered by the Ditto ID SDK when the user needs to answer one or more previously set secret questions as part of identity verification, typically during fallback authentication or device recovery.

📋 Purpose

This event is part of the validation process — not setup. It ensures the user can answer secret questions selected during an earlier onSelectSecretQuestionAnswer phase.

📥 Sample Payload

Click to expand the sample payload

{
"userID": "testuser",
"attemptsLeft": 3,
"challengeResponse": {
  "status": {
    "statusCode": 100,
    "statusMessage": "Success."
  },
  "session": {
    "sessionType": 0,
    "sessionID": "<Session_ID>"
  },
  "additionalInfo": {
    "DNAProxyPort": 0,
    "isAdUser": 0,
    "isDNAProxyLocalHostOnly": 0,
    "JWT": "",
    "accessTokenInfo": "",
    "settings": "",
    "mtlsP12Bundle": "",
    "configSettings": "",
    "loginIDs": [],
    "currentWorkFlow": "AdditionalDeviceActivation"
  },
  "challengeInfo": [
    {
      "key": "Prompt label",
      "value": "Secret Question"
    },
    {
      "key": "Response label",
      "value": "Secret Answer"
    },
    {
      "key": "Description",
      "value": "Choose your secret question and then provide answer"
    },
    {
      "key": "Reading",
      "value": "Set secret question and answer"
    }
  ]
},
"challengeMode": 0,
"secretQuestionAnswer": {
  "questionName": "What is your nickname?",
  "response": ""
},
"error": {
  "longErrorCode": 0,
  "shortErrorCode": 0,
  "errorString": "Success"
}
}

🧾 Field Descriptions

Field	Description
`userID`	Identifier of the user undergoing validation
`secretQuestions[]`	List of secret questions the user must answer
`attemptsLeft`	Number of allowed retries before the challenge fails

Updated 4 months ago