You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: use correct authKey field name in architecture.md; remove dead SANFormat constant
- architecture.md used 'signature' but the CERTInext API field is 'authKey' and
the parameter names are requestTs/requestTxnId — now consistent with API docs
and configuration.md
- SANFormat constant in Constants.EnrollmentParam was never used in any code path
and was already removed from documentation; no other CA plugin has this param
A unique transaction ID is generated for each request. The timestamp and transaction ID travel alongside the signature so the CERTInext server can reproduce and verify the hash. The plugin handles this automatically; no manual signing is required during normal operation.
43
+
A unique transaction ID (`requestTxnId`) is generated for each request. The timestamp (`requestTs`) and transaction ID travel alongside the `authKey` so the CERTInext server can reproduce and verify the hash. The plugin handles this automatically; no manual signing is required during normal operation.
44
44
45
45
An OAuth client-credentials mode is also available as an alternative. When OAuth is configured, the plugin exchanges a client ID and secret for a short-lived bearer token and automatically refreshes it before expiry.
0 commit comments