Pular para o conteúdo principal

The viewer-token keyring

GET 
/admin/signing-keys

Super-user only, and no X-Tenant-Id. One key signs viewer tokens for every casino, so this is not a resource of any of them. There is no permission for it on purpose: a permission is scoped to a membership and this resource is not.

No private key comes back, sealed or otherwise — only the id, the derived status and the timestamps.

Status is derived from the retirement time and never stored, so the two cannot disagree.

Responses​

The keyring — exactly one key is active