Identifier of anchor to update.

Name of the anchor (doesn't need to be unique).

SHA256 hash (ie. the fingerprint) of the data to anchor.

The value must be provided as an hexadecimal lowercase string. The hash of the empty file is forbidden.

This property must not be provided when creating a signature anchor: it is automatically set at creation time to the SHA256 hash of the signature property provided, meaning that the signature is the actual anchored data.

SHA256 hash (ie. the fingerprint) of the signed data.

The value must be provided as an hexadecimal lowercase string. The hash of the empty file is forbidden.

This property must not be provided when creating a data anchor.

X500 Distinguished Name representing the signed identity.

This property must not be provided when creating a data anchor.

Domain name of the identity issuer (ie. of the organization who verified the identity).

If set, the domain name of the identity URL must be included in the signedIssuerDomain domain name.

This property must not be provided when creating a data anchor.

Public key of the signer.

Currently only Bitcoin addresses are supported.

This property must not be provided when creating a data anchor.

Signature of the signedHash property using the public key pubKey, or, if any of the signedIdentity or signedIssuerDomain properties are provided,
signature of SHA256(signedHash + signedIdentity + signedIssuerDomain) using the public key pubKey.

Only Bitcoin signatures are currently supported.

This property must not be provided when creating a data anchor.

Web hook of the identity server to use to verify the signer's identity.

This URL allows to retrieve the identity associated to the public key pubKey.
It can also be used to verify that the identity server (itself identified by the TLS certificate of the URL) controls the key used to sign (ie. owns the private part of the key pair) by requesting it to sign some random data.

This URL MUST use an HTTPS scheme with a valid and non expired TLS certificate.

This URL MUST implement the following GET operation:

Query parameters:

• pubKey: the public key to be verified - mandatory
  
• leftData: the left part of the data to be signed (generated randomly by the caller) - if set, the identity server MAY provide a signature
  
  Output:
  
  A JSON object with:
• rightData: the right part of the data signed (generated randomly by the identity server) - optional
  
• signature: the signature of the string leftData + rightData using the public key pubKey - optional
  
• identity: the X500 identity associated to the key claimed by the identity server - optional
  
• key: additional information about the key - optional
  
  If identity is not provided, signature and rightData MUST be provided: in such a case the identity of the signer can be extracted from the TLS certificate.

Web hook to be called by the platform whenever the status property of the anchor changes:

the platform does a POST request on this URL with the anchor as a JSON object in the request body.

Verifying the authenticity of the callback can be done by checking the HMAC-SHA1 signature of the request body provided by the platform in the x-woleet-signature header.

Please refer to the documentation for more details.