DIdigicert
CSC (v0)

Authorize credential access

Use this endpoint to authorize access to a given credential for signing.

The following parameters are required in the request body:

credentialID — Signing credential ID.

hash — Signature hash string value.

numSignatures — The number of signatures to authorize the credential for.

post/csc/v0/credentials/authorize

Request

Request body

hashstring[] required

One or more Base64-encoded hash values to be signed. It shall be used if the SCAL parameter returned by credentials/info is “2”.If the SCAL parameter is “1”, the hash parameter is OPTIONAL.

credentialIDstring required

The identifier associated to the credential.

numSignaturesinteger required

The number of signatures to authorize. Multi-signature transactions can be obtained by using a combination of passing an array of hash values and calling the signatures/signHash method multiple times.

PINstring

The PIN collected from the user. It shall be used only when authMode from credentials/info is “explicit” and PIN/presence is not “false”.

OTPstring

The OTP collected from the user. It shall be used only when authMode from credentials/info is “explicit” and OTP/presence is not “false”.

descriptionstring

Contains a free form description of the authorization transaction in the lang language. The maximum size of the string shall be 500 characters. It can be useful when authMode from credentials/info is “implicit” to provide some hints about the occurring transaction.

clientDatastring

Arbitrary data from the Signature Application. It can be used to handle a transaction identifier or other application-specific data.

Example request

{
  "hash": [
    "sTOgwOm+474gFj0q0x1iSNspKqbcse4IeiqlDg/HWuI=",
    "c1RPZ3dPbSs0NzRnRmowcTB4MWlTTnNwS3FiY3NlNEllaXFsRGcvSFd1ST0="
  ],
  "credentialID": "GX0112348",
  "numSignatures": 2
}

Response

Credential authorization details

expiresInstring

The lifetime in seconds of the service access token. If omitted, the default expiration time is 3600 (1 hour).

SADstring

The Signature Activation Data to provide as input to the signatures/signHash method.

Example response

{
  "SAD": "_TiHRG-bAH3XlFQZ3ndFhkXf9P24/CKN69L8gdSYp5_pw\""
}

Changes

No recorded changes to this operation across all 1 revision of this API.