Register signing key

POST 
/auth/signing-key

Register an Ed25519 public key for signed-request authentication. The signature field must be a base64 Ed25519 signature over the exact UTF-8 bytes of the publicKey field, made with the corresponding private key (proof of possession). Once registered, requests can authenticate by sending X-Signature-Key-Id, X-Signature-Timestamp (unix seconds), X-Signature-Nonce, and X-Signature (base64) headers instead of a bearer token. The signature covers the string: "magfi-v1\n{METHOD}\n{path with query}\n{timestamp}\n{nonce}\n{sha256 hex of raw body, empty body allowed}".

Request

Responses

201

Signing key registered successfully

400

Bad Request - Invalid input data

401

Unauthorized - Invalid or missing authentication token

403

Forbidden - Insufficient permissions

404

Not Found - Resource not found

409

Conflict - Resource already exists or state conflict

422

Unprocessable Entity - Validation error

Environment:

ProductionSandbox