Cloudflare Workers PDF417 Driver License API

Designing a Safe PDF417 Route in Cloudflare Workers

A production Cloudflare Workers integration must protect the API key, reject oversized uploads, preserve enough image quality for decoding, and translate recoverable 422 responses into a useful capture experience. A browser-only request would expose credentials and make abuse controls harder.

A Server-Side Cloudflare Workers Integration

A Worker can protect the API key and forward Base64 JSON from an approved application origin while applying request-size and rate limits. The PDF417 API reference documents the complete response and error model. Identity fields are only returned after deterministic barcode decoding and AAMVA parsing.

Where This Workflow Fits

• Protected upload endpoint: Keep STRUCTOCR_API_KEY inside Cloudflare Workers server configuration rather than client code.
• Structured form prefill: Map normalized AAMVA fields into an editable form and require user or staff confirmation.
• Recoverable retake flow: Turn PDF417_NOT_DECODED into a clear request for a sharper, complete license-back image.

Cloudflare Workers PDF417 Endpoint

The example accepts image data on the server and calls /v1/driver-license-pdf417. Adapt authentication, authorization, rate limits, and retention to your application.

Prerequisite: Bind STRUCTOCR_API_KEY as a Worker secret; no SDK package is required for the edge proxy

interface Env { STRUCTOCR_API_KEY: string }

export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    if (request.method !== "POST") return new Response("Method not allowed", { status: 405 });
    const body = await request.json<{ img?: string }>();
    if (!body.img) return Response.json({ error: "img is required" }, { status: 400 });

    const upstream = await fetch("https://api.structocr.com/v1/driver-license-pdf417", {
      method: "POST",
      headers: { "content-type": "application/json", "x-api-key": env.STRUCTOCR_API_KEY },
      body: JSON.stringify({ img: body.img }),
    });
    return new Response(upstream.body, { status: upstream.status, headers: { "content-type": "application/json" } });
  },
};

Cloudflare Workers Response Shape

The example contains fictional identity values. Optional AAMVA elements can be null, and production logs should avoid storing raw identity data.

{
  "success": true,
  "data": {
    "type": "drivers_license",
    "source": "pdf417",
    "country_code": "USA",
    "region": "CA",
    "document_number": "SAMPLE1234",
    "surname": "SAMPLE",
    "given_names": "ALEX MORGAN",
    "first_name": "ALEX",
    "middle_name": "MORGAN",
    "sex": "X",
    "date_of_birth": "1990-01-15",
    "date_of_issue": "2025-01-15",
    "date_of_expiry": "2030-01-15",
    "address": "100 EXAMPLE AVE",
    "city": "SAMPLE CITY",
    "postal_code": "00000",
    "vehicle_class": "C",
    "restrictions": null,
    "endorsements": null,
    "document_discriminator": "SAMPLE-DISCRIMINATOR",
    "issuer_identification_number": null,
    "aamva_version": 10,
    "jurisdiction_version": 0
  }
}