Rotate Key

Replace an agent's key, method specification section 4.3.

The identifier does not change: section 2.2 derives it from the key at registration time. The retired key stays in the DID document marked revoked with its revokedDate. Two proofs: the API key of the agent, and a signature by the key in force over the rotation payload, which names that key so a captured request cannot be replayed once the key has moved on.

post/identity/rotate-key

Request

  • Base URL: https://api.moltrust.ch (the document declares no server; this is the origin it was published from)
  • URL: https://api.moltrust.ch/identity/rotate-key
  • Auth: none declared

Headers

X-API-Keystring nullable

Request body

didstring required
new_public_keystring required

Ed25519 public key, base64url (section 4.3) or 64 hex

signaturestring required

base64url Ed25519 signature by the CURRENT key over 'moltrust-rotate-key/v1\n<did>\n<current key hex>\n<new key hex>'

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.