Reference
Auth
Turn a proof a machine already has into a short-lived credential, and hand it back when the job is done.
| Operation | Route |
|---|---|
| Trade a CI OIDC token for a machine credential | POST /api/v1/auth/oidc |
| Trade a CI OIDC token for a delivery credential | POST /api/v1/auth/oidc/delivery |
| Trade a signed AWS caller-identity request for a machine credential | POST /api/v1/auth/aws |
| Trade a signed challenge for a machine credential | POST /api/v1/auth/keypair |
| Get the nonce a bound keypair must sign | POST /api/v1/auth/keypair/challenge |
| Bind a host's public key to its credential | POST /api/v1/auth/keypair/enroll |
| Destroy the credential making the request | POST /api/v1/auth/revoke |