# Senior Verification API (60+)

## Overview

The Senior Verification API determines whether an authenticated citizen is 60 years old or older.

This API follows the TRIDENT VDG data minimization principles by returning an eligibility result instead of exposing the citizen's date of birth.

## Authorization

A valid OAuth 2.0 Access Token issued by TRIDENT IDP is required.

### Required Scope

`ebc.age.over.60`

## Endpoint

GET /facade-vdg/api/v1/ebc/senior-verification

## Request Headers

Authorization: Bearer <access_token>

## Successful Response

```json
{
  "over60": true
}
```

## Response Fields

| Field 	| Description 												
|---------	|-----------------------------------------------------------							
| over60 	| Indicates whether the citizen is 60 years old or older 	

## Error Responses

### 401 Unauthorized

```json
{
  "error": "invalid_token",
  "message": "The access token is invalid or inactive"
}
```

### 403 Forbidden

```json
{
  "error": "insufficient_scope",
  "message": "Required scopes: ebc.age.over.60"
}
```

### 404 Not Found

```json
{
  "error": "data_not_found",
  "message": "Birth date data was not found for the user"
}
```

## Security Model

- Validates the Access Token issued by TRIDENT IDP.
- Verifies the required scopes.
- Calculates age eligibility.
- Returns only a derived yes/no response.

The citizen's date of birth is never exposed.
