Exchange API key for tokens
POST/api-key/token
Verify an ECDSA P-256 signature and issue JWT tokens. The client signs
the message {key_id}.{unix_timestamp} with their private key using ES256.
The timestamp must be within ±30 seconds of the server time.
Request
Responses
- 200
- 400
- 401
- 500
Tokens issued successfully. A user key yields an access and refresh token; an organization key yields an access token only.
Invalid request (missing fields)
Invalid API key, expired, revoked, invalid signature, or timestamp out of range
Internal server error