---
title: "Decrypt an RSA signature"
method: POST
path: "/v1/rsa-signatures/decrypt"
tags: ["RSA Signatures"]
---

# Decrypt an RSA signature

`POST /v1/rsa-signatures/decrypt`

The REST API used in Payment Pages 2.0 are CORS (Cross-Origin Resource Sharing) enabled and therefore requires a digital signature. You use rsa_signatures to generate the required digital signature and token for a Payment Pages 2.0 form, and then you use the decrypt REST service to decrypt the signature to validate the signature and key.

This REST service should be used only when you implement Payment Pages 2.0.

## Headers

- `Idempotency-Key` string
- `Accept-Encoding` string
- `Content-Encoding` string
- `Zuora-Track-Id` string
- `Zuora-Entity-Ids` string
- `Zuora-Org-Ids` string
- `Zuora-Version` string

## Request body

- POSTDecryptionType
  - `method` string, required — The type of the request. Set it to POST.
  - `publicKey` string, required — The public key generated by Zuora.
  - `signature` string, required — The signature generated by Zuora.

## Response `200`

OK

- POSTDecryptResponseType
  - `decryptedSignature` string — The string of a list of the following items: Payment Pages 2.0 URL, tenant ID, timestamp,the Payment Page ID The items are separated by '#', e.g., "/apps/publichostedpagelite.do#12271#rvBp1AxBJwk6FrT7aqFuABIINiRbwJCc #1418848373103#2c92c0f948f899"
  - `publicKey` string — The public key passed in as a request parameter.
  - `signature` string — The signature passed in as a request parameter.
  - `success` boolean — Returns `true` if the request was processed successfully.

## Other responses

- `500` — Internal Server Error
- `4XX` — Request Errors

---

[API](https://skmtc.dev/zuora/apis/api-reference.md) · [All operations](https://skmtc.dev/zuora/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/zuora/api-reference/revisions/d11e237f3e54/schema)