Identifier of anchor to update.

Name of the anchor (doesn't need to be unique).

SHA256 hash (ie. the fingerprint) of the original data to anchor.

The value must be provided as an hexadecimal lowercase string.

This property must not be provided when creating a signature anchor: it is set at creation time to the SHA256 hash of the signature property provided (so the signature is what is actually anchored in this case).

SHA256 hash (ie. the fingerprint) of the original signed data.

The value must be provided as an hexadecimal lowercase string.

This property must not be provided when creating a data anchor.

X500 Distinguished Name representing the signed identity.

This property must not be provided when creating a data anchor.

Domain name of the identity issuer (ie. of the organization who verified the identity).

If set, the domain name of the identity URL must be included in the signedIssuerDomain domain name.
This property must not be provided when creating a data anchor.

Public key of the signee.

Currently only Bitcoin addresses are supported.

This property must not be provided when creating a data anchor.

Signature of the signedHash property using the public key pubKey, or, if any of signedIdentity or signedIssuerDomain is provided,
signature of SHA256(hashToSign + signedIdentity + signedIssuerDomain) using the public key pubKey.

Only Bitcoin signatures are currently supported.

This property must not be provided when creating a data anchor.

Web hook of the identity server to use to verify the signee's identity.

This URL allows to retrieve the identity associated to the public key pubKey.
It can also be used to verify that the identity server (itself identified by the TLS certificate of the URL) controls the key used to sign (ie. owns the private part of the key pair) by requesting it to sign some random data.

This URL MUST use an HTTPS scheme with a valid and non expired TLS certificate.

This URL MUST implement the following GET operation:

Query parameters:

• pubKey: the public key to be verified - mandatory
  
• leftData: the left part of the data to be signed (generated randomly by the caller) - if set, the identity server MAY provide a signature
  
  Output:
  
  A JSON object with:
• rightData: the right part of the data signed (generated randomly by the identity server) - optional
  
• signature: the signature of the string leftData + rightData using the public key pubKey - optional
  
• identity: the X500 identity associated to the key claimed by the identity server - optional
  
• key: additional information about the key - optional
  
  If identity is not provided, signature and rightData MUST be provided: in such a case the identity of the signee can be extracted from the TLS certificate.

Web hook to be called by the platform whenever the anchor status change:

the platform does a POST request on this URL with the anchor as a JSON object in the request body.

Verifying the authenticity of the callback can be done by checking the HMAC-SHA1 signature of the request body provided by Woleet in the x-woleet-signature header.

For more information see the documentation.