Keyo - enroll a palm biometric identity

arazzo: 1.0.1
info:
  title: Keyo - enroll a palm biometric identity
  version: 1.0.0
  description: >-
    Authenticate, create a Keyo Identity, and start palm biometric enrollment on
    a device. Grounded in the reconstructed Keyo OpenAPI operationIds.
sourceDescriptions:
- name: keyo
  url: ../openapi/keyo-openapi.yml
  type: openapi
workflows:
- workflowId: enrollPalmIdentity
  summary: Create an identity and start palm enrollment.
  description: >-
    Exchange client credentials for a bearer token, create an Identity, then
    start biometric enrollment on the specified device.
  inputs:
    type: object
    required: [secret_key, first_name, last_name, device_id]
    properties:
      secret_key:
        type: string
        description: Base64 client_id:client_secret from the org dashboard.
      first_name:
        type: string
      last_name:
        type: string
      email:
        type: string
      device_id:
        type: integer
  steps:
  - stepId: getToken
    operationId: OAuthClientCredentials
    requestBody:
      contentType: application/x-www-form-urlencoded
      payload:
        grant_type: client_credentials
    outputs:
      access_token: $response.body#/access_token
  - stepId: createIdentity
    operationId: IdentitiesPost
    requestBody:
      contentType: application/json
      payload:
        first_name: $inputs.first_name
        last_name: $inputs.last_name
        email: $inputs.email
    outputs:
      identity_id: $response.body#/id
  - stepId: startEnroll
    operationId: IdentitiesStartEnroll
    parameters:
    - name: id
      in: path
      value: $steps.createIdentity.outputs.identity_id
    requestBody:
      contentType: application/json
      payload:
        device_id: $inputs.device_id
    outputs:
      detail: $response.body#/detail
  outputs:
    identity_id: $steps.createIdentity.outputs.identity_id