Outcome

Read the per-tenant assertion signing secret (minted on first read)

Word Is Bond signs every outbound assertion request with this secret. Verify it on your endpoint: recompute hex(HMAC-SHA256(secret, ${wb-timestamp}.${rawBody})), compare in constant time, and reject a timestamp more than 5 minutes old. Rotate with POST /api/outcome/secret/rotate.

get/api/outcome/secret

Request

  • Base URL: https://api.wordis-bond.com
  • URL: https://api.wordis-bond.com/api/outcome/secret
  • Auth: HTTP bearer

Response

The signing secret + verification recipe

Example response

{
  "data": {
    "secret": "wbas_…"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.