|
270 | 270 | } |
271 | 271 | }, |
272 | 272 | "definitions": { |
| 273 | + "externaldatav1SignatureScheme": { |
| 274 | + "type": "string", |
| 275 | + "enum": ["SIGNATURE_SCHEME_EPHEMERAL_KEY_P256"] |
| 276 | + }, |
273 | 277 | "protobufAny": { |
274 | 278 | "type": "object", |
275 | 279 | "properties": { |
|
373 | 377 | "type": "object", |
374 | 378 | "properties": { |
375 | 379 | "scheme": { |
376 | | - "$ref": "#/definitions/v1SignatureScheme", |
| 380 | + "$ref": "#/definitions/externaldatav1SignatureScheme", |
377 | 381 | "description": "Scheme of signing key." |
378 | 382 | }, |
379 | 383 | "publicKey": { |
|
449 | 453 | "AUTHENTICATOR_TRANSPORT_HYBRID" |
450 | 454 | ] |
451 | 455 | }, |
| 456 | + "v1ClientSignature": { |
| 457 | + "type": "object", |
| 458 | + "properties": { |
| 459 | + "publicKey": { |
| 460 | + "type": "string", |
| 461 | + "description": "The public component of a cryptographic key pair used to create the signature." |
| 462 | + }, |
| 463 | + "scheme": { |
| 464 | + "$ref": "#/definitions/v1ClientSignatureScheme", |
| 465 | + "description": "The signature scheme used to generate the client signature." |
| 466 | + }, |
| 467 | + "message": { |
| 468 | + "type": "string", |
| 469 | + "description": "The message that was signed." |
| 470 | + }, |
| 471 | + "signature": { |
| 472 | + "type": "string", |
| 473 | + "description": "The cryptographic signature over the message." |
| 474 | + } |
| 475 | + }, |
| 476 | + "required": ["publicKey", "scheme", "message", "signature"] |
| 477 | + }, |
| 478 | + "v1ClientSignatureScheme": { |
| 479 | + "type": "string", |
| 480 | + "enum": ["CLIENT_SIGNATURE_SCHEME_API_P256"] |
| 481 | + }, |
452 | 482 | "v1Curve": { |
453 | 483 | "type": "string", |
454 | 484 | "enum": ["CURVE_SECP256K1", "CURVE_ED25519"] |
|
669 | 699 | "description": "Unique identifier for a given Organization. If provided, this organization id will be used directly. If omitted, uses the verification token to look up the verified sub-organization based on the contact and verification type." |
670 | 700 | }, |
671 | 701 | "clientSignature": { |
672 | | - "type": "string", |
673 | | - "description": "Optional signature associated with the public key passed into the verification step. This must be a hex-encoded ECDSA signature over the verification token. Only required if a public key was provided during the verification step." |
| 702 | + "$ref": "#/definitions/v1ClientSignature", |
| 703 | + "description": "Optional signature proving authorization for this login. The signature is over the verification token ID and the public key. Only required if a public key was provided during the verification step." |
674 | 704 | } |
675 | 705 | }, |
676 | 706 | "required": ["verificationToken", "publicKey"] |
|
689 | 719 | "type": "string", |
690 | 720 | "enum": ["PATH_FORMAT_BIP32"] |
691 | 721 | }, |
692 | | - "v1SignatureScheme": { |
693 | | - "type": "string", |
694 | | - "enum": ["SIGNATURE_SCHEME_EPHEMERAL_KEY_P256"] |
695 | | - }, |
696 | 722 | "v1SignupRequest": { |
697 | 723 | "type": "object", |
698 | 724 | "properties": { |
|
741 | 767 | "wallet": { |
742 | 768 | "$ref": "#/definitions/v1WalletParams", |
743 | 769 | "description": "The wallet to create for the sub-organization" |
| 770 | + }, |
| 771 | + "clientSignature": { |
| 772 | + "$ref": "#/definitions/v1ClientSignature", |
| 773 | + "description": "Optional signature proving authorization for this signup. The signature is over the verification token ID and the root user parameters for the root user associated with the verification token. Only required if a public key was provided during the verification step." |
744 | 774 | } |
745 | 775 | }, |
746 | 776 | "required": ["apiKeys", "authenticators", "oauthProviders"] |
|
767 | 797 | "type": "object", |
768 | 798 | "$ref": "#/definitions/v1AppProof" |
769 | 799 | }, |
770 | | - "description": "A list of app proofs generated by enclaves during activity execution, providing verifiable attestations of performed operations." |
| 800 | + "description": "A list of App Proofs generated by enclaves during activity execution, providing verifiable attestations of performed operations." |
771 | 801 | } |
772 | 802 | }, |
773 | 803 | "required": ["organizationId", "userId"] |
|
0 commit comments