Skip to main content
POST
Register a consent signing key

Authorizations

Authorization
string
header
required

Bearer and DPoP tokens are supported depending on the API configuration

Scopes

create:me:consent_signing_keys

Body

application/json

Request body for registering a consent signing key.

jwk
ec · object
required

A public ECDSA P-256 JWK to register for signing consent decisions. Private key material must never be supplied. The key identifier is assigned by Auth0 and must not be supplied.

device_identifier
string
required

A human-readable label for the device holding the corresponding private key. This is a label only and is not a guarantee that the key is bound to that device.

Required string length: 1 - 128
expires_at
string<date-time>

When the key should expire. Optional; defaults to the maximum 2 year lifetime. Must be at least 1 hour in the future and no later than the default.

Response

Consent signing key registered successfully

A consent signing key registered by the authenticated user.

kid
string
required

The unique identifier of the registered signing key. Supply this when signing a consent decision so the signature can be verified against this key.

Example:

"csk_72jbvv7LfRKYp59gtRLtkn"

jwk
ec · object
required

A registered public ECDSA P-256 JWK used to sign consent decisions. Private key material is never stored or returned.

device_identifier
string
required

The human-readable label for the device holding the corresponding private key.

created_at
string<date-time>
required

The date and time when the signing key was registered.

expires_at
string<date-time>
required

The date and time when the signing key expires. After this point the key can no longer be used to sign consent decisions and must be replaced.