|
16 | 16 | - name: Resource addressing with relative roots - Registration not required |
17 | 17 | - name: Resource addressing with relative roots - Registration required |
18 | 18 | paths: |
19 | | - /.p2/core/v1/challenge: |
20 | | - get: |
21 | | - operationId: Unregistered_challengeString |
22 | | - summary: Receive a challenge string |
23 | | - description: |- |
24 | | - Request a challenge string. See the corresponding |
25 | | - [protocol definition chapter](https://docs.polyphony.chat/Protocol%20Specifications/core/#42-challenge-strings) |
26 | | - for more information. |
27 | | - parameters: [] |
28 | | - responses: |
29 | | - '200': |
30 | | - description: The request has succeeded. |
31 | | - content: |
32 | | - application/json: |
33 | | - schema: |
34 | | - $ref: '#/components/schemas/polyproto.core.models.ChallengeStringResponse' |
35 | | - tags: |
36 | | - - Federated Identity - Registration not required |
37 | | - security: |
38 | | - - BearerAuth: [] |
39 | 19 | /.p2/core/v1/data: |
40 | 20 | delete: |
41 | 21 | operationId: Unregistered_deleteData |
@@ -1472,8 +1452,8 @@ paths: |
1472 | 1452 | summary: Upload encrypted private key material |
1473 | 1453 | description: |- |
1474 | 1454 | Upload encrypted private key material to the server for later retrieval. The size of |
1475 | | - the individual array elements must not exceed |
1476 | | - the server's maximum upload size for this route. This is usually not more than 10kb and can be as |
| 1455 | + the individual array elements must not exceed |
| 1456 | + the server's maximum upload size for this route. This is usually not more than 10kb and can be as |
1477 | 1457 | low as 800 bytes, depending on the server configuration. |
1478 | 1458 | parameters: [] |
1479 | 1459 | responses: |
@@ -1648,31 +1628,8 @@ components: |
1648 | 1628 | example: 7ab2bbde7fe43c7481a3a61031546bab16bc1a8735b2f0cdd519958c7f2f99f8 |
1649 | 1629 | minLength: 32 |
1650 | 1630 | maxLength: 32 |
1651 | | - description: Signature generated by the home server. This signature can be verified using the home servers' public identity key. A server generates the `cacheSignature` by concatenating the serial number of the ID-Cert in question with the `cacheValidNotBefore` timestamp and the `cacheValidNotAfter` timestamp, then generating the signature of the resulting concatenated string using the private identity key of the server. Clients must reject certificates of which the `cacheSignature` can not be verified to be correct. |
| 1631 | + description: Signature generated by the home server, encoded in [Hexadecimal](https://en.wikipedia.org/wiki/Hexadecimal) (base-16). This signature can be verified using the home servers' public identity key. A server generates the `cacheSignature` by concatenating the serial number of the ID-Cert in question with the `cacheValidNotBefore` timestamp, the `cacheValidNotAfter` timestamp, and the `invalidatedAt` timestamp, if present. Clients must reject certificates of which the `cacheSignature` can not be verified to be correct. |
1652 | 1632 | description: A cacheable response to an ID-Cert request. |
1653 | | - polyproto.core.models.ChallengeStringResponse: |
1654 | | - type: object |
1655 | | - required: |
1656 | | - - challenge |
1657 | | - - expires |
1658 | | - properties: |
1659 | | - challenge: |
1660 | | - type: string |
1661 | | - minLength: 32 |
1662 | | - maxLength: 256 |
1663 | | - description: The challenge string, which the client should sign with its private identity key. |
1664 | | - expires: |
1665 | | - type: integer |
1666 | | - format: uint64 |
1667 | | - description: The UNIX timestamp after which the challenge expires. |
1668 | | - description: |- |
1669 | | - A challenge string response, as received from a server when requesting a challenge string. |
1670 | | -
|
1671 | | - From the polyproto protocol definition: "verify an actor's private identity key possession, |
1672 | | - without revealing the private key itself. These strings, ranging from 32 to 256 characters, |
1673 | | - have a UNIX timestamp lifetime. If the current timestamp surpasses this lifetime, the |
1674 | | - challenge fails. The actor signs the string, sending the signature and their ID-Cert to the |
1675 | | - server, which then verifies the signature's authenticity." |
1676 | 1633 | polyproto.core.models.EncryptedPKM: |
1677 | 1634 | type: object |
1678 | 1635 | required: |
|
0 commit comments