Skip to main content

RegisterOrgSigningKeyInput

No description

input RegisterOrgSigningKeyInput {
  orgId: BigInt!
  kid: String!
  algorithm: String!
  publicJwk: String!
  issuer: String!
  audience: String
  appIds: [BigInt!]
  label: String
}

Fields​

RegisterOrgSigningKeyInput.orgId ● BigInt! non-null scalar​

RegisterOrgSigningKeyInput.kid ● String! non-null scalar​

The key id your assertions name in their header (1-128 characters), unique among the org’s active keys.

RegisterOrgSigningKeyInput.algorithm ● String! non-null scalar​

'EdDSA' (Ed25519), 'ES256' (P-256) or 'RS256' (RSA, 2048 bits or more).

RegisterOrgSigningKeyInput.publicJwk ● String! non-null scalar​

The PUBLIC key as a JWK (a JSON object). A JWK with private members is refused.

RegisterOrgSigningKeyInput.issuer ● String! non-null scalar​

The iss your assertions carry (for example your sign-in service’s URL).

RegisterOrgSigningKeyInput.audience ● String scalar​

The aud your assertions carry, when your identity provider sets its own (for example its client id). Omit to require ck:app:<appId>.

RegisterOrgSigningKeyInput.appIds ● [BigInt!] list scalar​

Limit the key to these apps of the organization; omit for every app.

RegisterOrgSigningKeyInput.label ● String scalar​

Member Of​

registerOrgSigningKey mutation