Reference / Os Access

Approve or deny a challenge with a device signature over its canonical form.

POST /v1/os/challenges/{id}/respond

Secret API key operationId: respond_challenge

Authorization

Server-to-server. Send a secret key as a Bearer token plus the x-application-id header.

Path parameters

id string<uuid> required

Challenge id

Request body · required

approve boolean required
device_id string<uuid> required uuid
signature string

base64(DER ECDSA/P-256 signature) over the challenge's `canonical`. Required to approve.

Responses

200 Recorded

{
  "data": {
    "id": "018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f",
    "status": "string"
  },
  "error": {
    "code": "string",
    "message": "string"
  },
  "meta": {
    "timestamp": "string"
  },
  "success": false
}

401 Bad signature

404 Not found

409 No longer pending

Request

curl -X POST "https://api.identrahq.com/v1/os/challenges/018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f/respond" \
  -H "Content-Type: application/json" \
  -d '{
  "approve": false,
  "device_id": "018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f",
  "signature": "string"
}'

Try it

live request

POST https://api.identrahq.com/v1/os/challenges/018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f/respond

Path parameters

id *

Request body

application/json