relay

Create a Privacy Pass

Issues a Privacy Pass token by blind-signing a client-provided blinded token (Blind RSA, RFC 9578). The returned blind signature is unblinded client-side to produce a Privacy Pass token that can later be redeemed anonymously (for example, when generating a Relay claim).

post/privacy-passes

Request

  • Base URL: https://api.withpersona.com/api/v1
  • URL: https://api.withpersona.com/api/v1/privacy-passes
  • Auth: HTTP bearer

Headers

Key-Inflection'camel' | 'kebab' | 'snake'

Determines casing for the API response.

Idempotency-Keystring

Ensures the request is idempotent.

Persona-Version'2026-09-29' | '2025-12-08' | '2025-10-27' | '2023-01-05' | '2022-09-01' | '2021-08-18' | '2021-07-05' | '2021-02-21' | '2020-05-18'

Server API version. More info on versioning can be found here.

Request body

blinded-tokenstring required

The base64url-encoded blinded token to be signed. Produced client-side by blinding a token input with the issuer public key identified by key-id.

key-idstring required

The hex-encoded identifier of the issuer signing key to use. Must match the key the blinded-token was blinded against.

Response

Returns the blind signature for the submitted blinded token.

blind-sigstring required

The base64url-encoded blind signature. Unblind this client-side to produce the Privacy Pass token.

Changes

No recorded changes to this operation across all 1 revision of this API.