PHphala
Apps
apps-launch-token

Set or rotate the app launch token

Changed on

Sets the app's launch token, generating one when the body omits it, and returns the plaintext and its hash once. CVMs keep booting with their current compose: update each CVM's requirements.launch_token_hash to the returned hash before its next boot, or it fails closed. Phala Cloud and the node operator can read the token, so it protects only against parties who know the public compose.

post/api/v1/apps/{app_id}/launch-token

Request

Path parameters

app_idstring required

Hex app identifier

Request body

launch_tokenstring nullable

Token to set (at least 32 bytes). Omit to have Phala Cloud generate one.

Response

New launch token and hash

launch_tokenstring required

The app's new launch token. Returned only here, once.

launch_token_hashstring required

Value for compose_file.requirements.launch_token_hash of every CVM of the app

Changes