Rotate the calling application's EC keypair
Changed onGenerates a fresh EC P-256 keypair for the authenticated application and returns the new public key (JWK) and private key material (appPrivateJwk).
The private JWK is returned only once - store it securely. After rotation:
- IDaaS will encrypt all outbound webhooks with the new public key.
- Requests encrypted with the old public key will be rejected (Content-Encryption: JWE decryption will fail).
- Allow a brief migration window for in-flight messages before destroying the old private key.
The keyVersion field is incremented on each rotation.
Request
- Base URLhttps://idaas.yourflexpay.com/api
- AuthHTTP bearer
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Response
Keypair rotated - new key material returned
Example response
{
"data": {
"appHandle": "walletapp",
"keyVersion": 1
}
}Changes
- warning
removed the optional property
/from the response with the status - warning
removed the optional property
/from the response with the status - warning
removed the optional property
/from the response with the status - info
api tag
Authenticationadded - info
api tag
Applicationsremoved - info
added the optional property
//to the response with the status - info
added the optional property
//to the response with the status - info
added the optional property
//to the response with the status - info
added the optional property
//to the response with the status - info
added the optional property
//to the response with the status - info
added the optional property
//to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
to the response with the status - info
added the optional property
to the response with the status - info
added the optional property
to the response with the status
- warning