Sign in

v1

latestOpenAPI 3.1.02026-07-24416405768.8 KB
a) Authentication

Get a PKI login challenge

Returns an encrypted challenge for the identity's public key. The client decrypts or signs it with their private key and presents the result to /login. If a clientChallenge is provided, the server decrypts it with the Eclipse private key to allow the client to verify the server's identity.

get/eclipse-conductor/rest/v1/authentication/login-challenges

Query parameters

challengeType'RSA_ECB_OAEPWithSHA_1AndMGF1Padding' | 'RSA_PKCS1_SHA_256_Signature' | 'WebAuthN'
clientChallengestring
identitystring

Response

OK

base64EncodedChallengestring required

PKI or WebAuthN challenge data

base64EncodedClientChallengeResponsestring

For PKI: Base64 encoded SHA256 of Eclipses decryption of the client challenge sent through so that the client can verify the authenticity of the server

expiresstring date-time

ISO 8601 date/time of when the challenge expires

Example response

{
  "expires": "2022-03-10T12:15:50-04:00"
}