Skip to main content
POST
Rotate the service's key pair

Authorizations

X-Qanapi-Authorization
string
header
required

A machine credential, qk_ followed by its secret. The first twelve characters are an indexed prefix; the rest is compared in constant time against a stored SHA-256 hash. A key reaches only the configurations it is linked to.

It may also be sent as Authorization: Bearer qk_..., which is recognised by the prefix.

Response

The new public key.

key_id
string
required
Example:

"QANAPI-PUB-1DAF66C2"

algorithm
string
required
Example:

"RSA-2048"

public_key_material
string
required

PEM.

rotates_after
string<date-time>
required

When the service begins advertising a successor.

expires_at
string<date-time>
required
created_at
string<date-time>
required