Order Checkr background checks and consume status webhooks

Steps

1. Authenticate by passing your Checkr API key as the Basic Auth username with an empty password on all requests to https://api.checkr.com/v1
2. Create a candidate record by sending POST /v1/candidates with first_name, last_name, and email; store the returned id as the candidate_id for subsequent calls
3. Order the background check by sending POST /v1/invitations with the candidate_id and the package slug (e.g., 'driver_pro', 'tasker_standard') to send the candidate a link to provide their information and consent
4. Register a webhook endpoint in the Checkr Dashboard under Developer Settings; subscribe to events such as report.created, report.completed, and invitation.completed
5. On each incoming webhook POST, verify authenticity by computing HMAC-SHA256 of the raw request body using your webhook secret key and comparing it to the X-Checkr-Signature header value
6. When the report.completed event arrives, read the status (complete), result (clear or consider), and assessment fields from the payload; fetch the full report via GET /v1/reports/{reportId} if additional detail is needed