Verify immutable NHS signature separately from freshness and current accounting state

post/action-receipts/verify

Request body

signed_receiptstring required

Exact canonical JSON returned by NHS

signaturestring required

Unpadded base64url HMAC

Signature validity, time-window status, and current online commercial state when available

signature_validboolean

within_validity_windowboolean

time_status'current' | 'expired' | 'not_yet_valid' | 'invalid_time'

current_state_availableboolean

current_state_status'current' | 'not_found' | 'unavailable'

Changed in 1 of the 5 revisions of this API.1

Aug 5, 2026a7faccfe4d5f1See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 2 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog