{ "item": [ { "name": "Sign", "description": "The QES signing ceremony (`/v1/sign/*`).", "item": [ { "id": "cdf95d0c-b973-5979-8f9c-dd1c45c7a8d9", "name": "Create request - physical ATK (primary)", "request": { "name": "Create request - physical ATK (primary)", "description": { "content": "HTTP Basic. Provide the document one of three ways - inline `document` (base64), an allow-listed\n`documentRef`, or a bare `hash` (only for `format:\"raw\"`). Container formats\n(pades/asice/adoc) require exactly one of `document` or `documentRef`. PAdES accepts an unsigned\nor already-signed PDF; ASiC-E/ADOC accept either a PDF (Tvarka constructs a new single-payload\ncontainer) or an existing valid container, which is treated as an opaque whole and receives one\nadditional signature without payload or attachment edits. Physical requests return a client\ntoken, NFC returns a pairing hint, and Smart-ID/Mobile-ID return a user verification code.\nRemote methods are PAdES-only and stay server-side.\n", "type": "text/plain" }, "url": { "path": [ "sign", "requests" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"format\": \"pades\",\n \"method\": \"physical\",\n \"document\": \"{{documentBase64}}\",\n \"filename\": \"document.pdf\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "4dda6b0b-2616-525e-97e8-a85245aeb079", "name": "Create request - Smart-ID (secondary)", "request": { "name": "Create request - Smart-ID (secondary)", "description": { "content": "HTTP Basic. Provide the document one of three ways - inline `document` (base64), an allow-listed\n`documentRef`, or a bare `hash` (only for `format:\"raw\"`). Container formats\n(pades/asice/adoc) require exactly one of `document` or `documentRef`. PAdES accepts an unsigned\nor already-signed PDF; ASiC-E/ADOC accept either a PDF (Tvarka constructs a new single-payload\ncontainer) or an existing valid container, which is treated as an opaque whole and receives one\nadditional signature without payload or attachment edits. Physical requests return a client\ntoken, NFC returns a pairing hint, and Smart-ID/Mobile-ID return a user verification code.\nRemote methods are PAdES-only and stay server-side.\n", "type": "text/plain" }, "url": { "path": [ "sign", "requests" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"format\": \"pades\",\n \"method\": \"smart_id\",\n \"personalCode\": \"{{personalCode}}\",\n \"document\": \"{{documentBase64}}\",\n \"filename\": \"document.pdf\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "97470108-d5ad-5fd9-bc66-466bc0a045b4", "name": "Create request - Mobile-ID (secondary)", "request": { "name": "Create request - Mobile-ID (secondary)", "description": { "content": "HTTP Basic. Provide the document one of three ways - inline `document` (base64), an allow-listed\n`documentRef`, or a bare `hash` (only for `format:\"raw\"`). Container formats\n(pades/asice/adoc) require exactly one of `document` or `documentRef`. PAdES accepts an unsigned\nor already-signed PDF; ASiC-E/ADOC accept either a PDF (Tvarka constructs a new single-payload\ncontainer) or an existing valid container, which is treated as an opaque whole and receives one\nadditional signature without payload or attachment edits. Physical requests return a client\ntoken, NFC returns a pairing hint, and Smart-ID/Mobile-ID return a user verification code.\nRemote methods are PAdES-only and stay server-side.\n", "type": "text/plain" }, "url": { "path": [ "sign", "requests" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"format\": \"pades\",\n \"method\": \"mobile_id\",\n \"personalCode\": \"{{personalCode}}\",\n \"phoneNumber\": \"{{phoneNumber}}\",\n \"document\": \"{{documentBase64}}\",\n \"filename\": \"document.pdf\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "db51c592-3698-4649-a791-df9dd0e94045", "name": "Submit the card's signing certificate; receive the DTBS", "request": { "name": "Submit the card's signing certificate; receive the DTBS", "description": { "content": "Bearer clientToken. The API validates the certificate (chain, revocation, purpose =\nsigning/content-commitment, qualified/QSCD evidence), prepares the format-specific DTBS (for\nPAdES - the SHA-256 CAdES SignedAttributes digest; SHA-256 for both key curves), and returns\nit + `operationToken`. Physical/NFC only.\n", "type": "text/plain" }, "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "0790b29f-9e2b-4997-9f87-2567264c5f50", "name": "DTBS + operation token.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"dtbs\": \"\",\n \"dtbsHashAlgOid\": \"2.16.840.1.101.3.4.2.2\",\n \"operationToken\": \"\",\n \"cert\": {\n \"subject\": {\n \"serialNumber\": \"\",\n \"givenName\": \"\",\n \"sn\": \"\",\n \"cn\": \"\",\n \"c\": \"\"\n }\n },\n \"signing\": {\n \"format\": \"asice\",\n \"signatureEncodingHints\": \"\"\n },\n \"verificationCode\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "b50d1aa8-5868-486e-8029-2550ce0ffac9", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "4bb69ccf-aaf5-4b25-a8a3-7881894669bd", "name": "Format not allowed / origin not allowed / tenant suspended.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "fe6bbef1-c6e2-4a50-b067-95aff2e8d2c0", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c95f855b-90b2-45b2-a57f-34e2e582f1cf", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "a376ca6b-7baa-4cf5-8cb7-3aa0bdbf39b4", "name": "Cert purpose/chain/revocation/qualified reject, dtbs mismatch, bad signature, doc hash mismatch.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "certificate" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"certificate\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "546429e5-acbe-434e-92a4-b14c92f61648", "name": "Submit the raw card signature; assemble the container", "request": { "name": "Submit the raw card signature; assemble the container", "description": { "content": "Bearer clientToken + single-use `operationToken`. Synchronous: the API verifies the signature\nagainst the stored DTBS + cert, assembles + timestamps the AdES container inline, schedules\nasync validation, and returns `200 done` with `validation:{status:\"pending\"}` (or\n`notApplicable` in sandbox/raw, or the internal ADOC verdict). `finalizing` is observable via\nGET only if a crash wedges the request until the reaper releases it. Retry-safe; a transient\nassembly failure returns a retryable 5xx with the operation released; one `atk.sign` charge\nat `done`. Physical/NFC only; remote methods complete asynchronously.\n", "type": "text/plain" }, "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "bearer", "bearer": [ { "key": "token", "value": "{{bearerToken}}" } ] } }, "response": [ { "id": "bf8ffe29-b8e4-4293-9560-c6449951f4df", "name": "Done - container assembled + signature verified.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"status\": \"\",\n \"method\": \"physical\",\n \"validation\": {\n \"status\": \"pending\",\n \"level\": \"\",\n \"report\": \"\"\n },\n \"cert\": {\n \"subject\": {\n \"serialNumber\": \"\",\n \"givenName\": \"\",\n \"sn\": \"\",\n \"cn\": \"\",\n \"c\": \"\"\n }\n },\n \"sig\": \"\",\n \"sigAlgOid\": \"\",\n \"downloadToken\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "9293c47a-686e-47df-aef7-f07bd9e7a36c", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "3fc0acd4-6d0d-4daf-901d-6644680febac", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d4d2c6a7-7713-4a3b-bf9b-1211ff2f9db0", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "ad23a6b9-fa19-4cdc-804d-667535e46eec", "name": "Cert purpose/chain/revocation/qualified reject, dtbs mismatch, bad signature, doc hash mismatch.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "complete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: bearer", "type": "text/plain" }, "key": "Authorization", "value": "Bearer " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"signature\": \"\",\n \"signatureAlgorithm\": \"ES384\",\n \"operationToken\": \"\",\n \"signatureEncoding\": \"P1363\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unprocessable Entity (WebDAV) (RFC 4918)", "code": 422, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "a25cd7fb-89b4-4d5f-a0d2-eff04e557b22", "name": "Poll status + validation axis; fetch the result", "request": { "name": "Poll status + validation axis; fetch the result", "description": {}, "url": { "path": [ "sign", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "8a102d0d-3dbd-4d82-b194-ddd36949f67e", "name": "Current state.", "originalRequest": { "url": { "path": [ "sign", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"method\": \"physical\",\n \"status\": \"cancelled\",\n \"verificationCode\": \"\",\n \"validation\": {\n \"status\": \"failed\",\n \"level\": \"\",\n \"report\": \"\"\n },\n \"cert\": {\n \"subject\": {\n \"serialNumber\": \"\",\n \"givenName\": \"\",\n \"sn\": \"\",\n \"cn\": \"\",\n \"c\": \"\"\n }\n },\n \"sig\": \"\",\n \"sigAlgOid\": \"\",\n \"downloadToken\": \"\",\n \"error\": {\n \"code\": \"document_not_ready\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": false\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c6264062-7e2d-4cc6-8e88-5cff649ef2e6", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "sign", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "4aa741f8-e096-49c9-bfde-84f12fcc7d3c", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "ebd663a0-be02-4cc1-bd3c-e9228ce6c8eb", "name": "Download the signed container", "request": { "name": "Download the signed container", "description": { "content": "Authorized by the provider's Basic credentials or a `downloadToken` query param.", "type": "text/plain" }, "url": { "path": [ "sign", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/octet-stream" } ], "method": "GET", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "f074c416-ab3b-4f2c-a862-a62ac71396e7", "name": "The signed container bytes.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/octet-stream" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/octet-stream" } ], "body": "string", "cookie": [], "_postman_previewlanguage": "text" }, { "id": "07d72c87-33ab-4a5e-932a-8cd6ecfb8c87", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d3a67d87-3b1a-4ded-8ab4-7c1afa505c06", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "16f456be-1097-4fb9-808c-9b7d9cb1f365", "name": "Cancel a non-terminal request", "request": { "name": "Cancel a non-terminal request", "description": {}, "url": { "path": [ "sign", ":requestId", "cancel" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "4a781405-68a6-4e2c-931d-0fa9ed51c45d", "name": "Cancelled.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "cancel" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"method\": \"physical\",\n \"status\": \"cancelled\",\n \"verificationCode\": \"\",\n \"validation\": {\n \"status\": \"failed\",\n \"level\": \"\",\n \"report\": \"\"\n },\n \"cert\": {\n \"subject\": {\n \"serialNumber\": \"\",\n \"givenName\": \"\",\n \"sn\": \"\",\n \"cn\": \"\",\n \"c\": \"\"\n }\n },\n \"sig\": \"\",\n \"sigAlgOid\": \"\",\n \"downloadToken\": \"\",\n \"error\": {\n \"code\": \"document_not_ready\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": false\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "c4be39c1-8229-4d2c-acac-8928900602d2", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "cancel" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "9d02dc06-ee83-43b4-a94a-472b9225ca8f", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "cancel" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": {} }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "f393a848-b4e8-4bcb-8ad5-62fcb68e38d9", "name": "Rotate and return the NFC pairing token for a sign request", "request": { "name": "Rotate and return the NFC pairing token for a sign request", "description": {}, "url": { "path": [ "sign", ":requestId", "pairing" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "GET", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "2be0d3df-fcbc-4cc7-a683-acdc74744a65", "name": "Newly rotated pairing token and links.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "pairing" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"pairingToken\": \"\",\n \"expiresAt\": \"\",\n \"pairingUrl\": \"\",\n \"deepLink\": \"\",\n \"qrPayload\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "78032947-a786-417f-98fb-a249a2b143a7", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "pairing" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6074e723-727e-4935-aad0-30da68be5684", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "pairing" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "00637603-3aaf-47c0-96ae-d06f568e3178", "name": "Atomically claim an auth or sign NFC pairing", "request": { "name": "Atomically claim an auth or sign NFC pairing", "description": {}, "url": { "path": [ "pairing", "claim" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"pairingToken\": \"\",\n \"claimNonce\": \"\",\n \"device\": {\n \"platform\": \"\",\n \"appVersion\": \"\",\n \"deviceName\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": null }, "response": [ { "id": "c0b6d47b-3930-4845-9501-e764f791afca", "name": "Request-scoped client token for the phone.", "originalRequest": { "url": { "path": [ "pairing", "claim" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"pairingToken\": \"\",\n \"claimNonce\": \"\",\n \"device\": {\n \"platform\": \"\",\n \"appVersion\": \"\",\n \"deviceName\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"purpose\": \"auth\",\n \"clientToken\": \"\",\n \"status\": \"certInvalid\",\n \"expiresAt\": \"\",\n \"verificationCode\": \"\",\n \"summary\": {\n \"key_0\": \"string\",\n \"key_1\": \"string\",\n \"key_2\": 6435.308484695188,\n \"key_3\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "befe2d90-20eb-4348-9619-91bad96df21e", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "pairing", "claim" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"pairingToken\": \"\",\n \"claimNonce\": \"\",\n \"device\": {\n \"platform\": \"\",\n \"appVersion\": \"\",\n \"deviceName\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "cede199a-3860-4c54-9e06-cf848476a464", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "pairing", "claim" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"pairingToken\": \"\",\n \"claimNonce\": \"\",\n \"device\": {\n \"platform\": \"\",\n \"appVersion\": \"\",\n \"deviceName\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "a1593d45-7071-4af0-8204-b2cf1a4be52d", "name": "Too many requests.", "originalRequest": { "url": { "path": [ "pairing", "claim" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"pairingToken\": \"\",\n \"claimNonce\": \"\",\n \"device\": {\n \"platform\": \"\",\n \"appVersion\": \"\",\n \"deviceName\": \"\"\n }\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Too Many Requests", "code": 429, "header": [ { "key": "Content-Type", "value": "application/json" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "Retry-After", "value": "60" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "Validation", "description": "Standalone advisory validation of signed artifacts.", "item": [ { "id": "a9c7cf3d-7341-4d01-b47f-3afeb4fce0ba", "name": "Validate an existing signed document or container", "request": { "name": "Validate an existing signed document or container", "description": { "content": "Paid-tier, Basic-authenticated synchronous service. SiVa backs PAdES/ASiC-E and can return\n`passed`/`failed`. ADOC runs Tvarka's internal STRUCTURAL inspector, which performs no\ncryptographic verification and therefore never returns `passed` - a structurally sound ADOC\nyields `status: structural`. The verdict is advisory, not a regulatory conclusion. A\nsuccessful service call emits exactly one `atk.validate` event. `Idempotency-Key` makes network\nretries replay the original response without a second event.\n", "type": "text/plain" }, "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "ee32bdfc-b884-4a04-8a81-488ff54e61e6", "name": "Advisory validation result.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"status\": \"\",\n \"validation\": {\n \"status\": \"passed\",\n \"level\": \"\",\n \"policy\": \"aes\",\n \"report\": {\n \"key_0\": 9752,\n \"key_1\": false\n }\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "fa18e7f9-153b-46a4-b671-b51aa40ce43f", "name": "Malformed input (e.g. container format without document, hash without raw).", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "1548a880-8788-4e1a-8b3c-96fc92533c83", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "537e7536-1a34-4ab2-9136-59ced1731230", "name": "Format not allowed / origin not allowed / tenant suspended.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "0d1ab516-db9d-43be-99bb-d4540e01009a", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "6e7a86dd-3e3a-4fa8-944a-7449eef10d9f", "name": "Document exceeds the tenant's max size.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Request Entity Too Large", "code": 413, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "fc5adc42-7d15-4cf3-ade6-d52d5925fd91", "name": "Too many requests.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Too Many Requests", "code": 429, "header": [ { "key": "Content-Type", "value": "application/json" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "Retry-After", "value": "60" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "bba96910-7435-426e-9286-bc2246f49f78", "name": "Validation/TSA/revocation dependency failed transiently; retry with the same Idempotency-Key.", "originalRequest": { "url": { "path": [ "validation" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Service Unavailable", "code": 503, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "LTV", "description": "Post-signature timestamp and long-term-validation upgrades.", "item": [ { "id": "15dd3c0e-717d-4b2c-86d3-cd4277ecc321", "name": "Add qualified timestamps to untimestamped XAdES signatures", "request": { "name": "Add qualified timestamps to untimestamped XAdES signatures", "description": { "content": "Paid-tier, Basic-authenticated synchronous service for ASiC-E and ADOC. Every XAdES signature\nwithout SignatureTimeStamp receives an RFC 3161 token; existing timestamps are preserved. Emits\nexactly one `atk.timestamp` event and returns a one-off output download token.\n", "type": "text/plain" }, "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "50495c43-bf1d-4947-92c6-7c55f4b91d48", "name": "Timestamped container is ready.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"status\": \"\",\n \"service\": \"timestamp\",\n \"format\": \"adoc\",\n \"downloadToken\": \"\",\n \"timestampedSignatures\": 8690,\n \"archived\": true,\n \"changed\": true,\n \"level\": \"\",\n \"signatureField\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "8f927420-af97-4d9a-9713-77d852c64c30", "name": "Malformed input (e.g. container format without document, hash without raw).", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "55131a26-0e72-437e-ada4-0ef002379c6e", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "884242d9-02ce-4037-98ec-65198076e56e", "name": "Format not allowed / origin not allowed / tenant suspended.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "8ee7030d-b14e-43f4-b796-d914ee1821e9", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "e9518439-7f48-4b9c-8fd1-c96f12915ae2", "name": "Document exceeds the tenant's max size.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Request Entity Too Large", "code": 413, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "85661d65-fc90-4444-af20-5b6ef2faaaa4", "name": "Too many requests.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Too Many Requests", "code": 429, "header": [ { "key": "Content-Type", "value": "application/json" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "Retry-After", "value": "60" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "33b9b3a9-cc82-4064-8d4b-3dfdc16d7080", "name": "Validation/TSA/revocation dependency failed transiently; retry with the same Idempotency-Key.", "originalRequest": { "url": { "path": [ "timestamp" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Service Unavailable", "code": 503, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "2a8219c3-c339-4396-b1ad-e4d5dcc5662d", "name": "Upgrade a PAdES B-T signature to PAdES B-LT", "request": { "name": "Upgrade a PAdES B-T signature to PAdES B-LT", "description": { "content": "Paid-tier, Basic-authenticated synchronous service. Fresh signer and TSA revocation evidence is\ncollected and embedded as DSS/VRI; the OCSP freshness hard rule applies. Already-valid B-LT is\nreturned unchanged. Emits exactly one `atk.archive` event and returns a one-off download token.\n", "type": "text/plain" }, "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "f7a3ea1c-8ff4-426c-9ad9-f002016898d1", "name": "PAdES B-LT document is ready.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"status\": \"\",\n \"service\": \"timestamp\",\n \"format\": \"adoc\",\n \"downloadToken\": \"\",\n \"timestampedSignatures\": 8690,\n \"archived\": true,\n \"changed\": true,\n \"level\": \"\",\n \"signatureField\": \"\"\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "5c2346cf-b87a-49ed-b367-10d1f5e22690", "name": "Malformed input (e.g. container format without document, hash without raw).", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Bad Request", "code": 400, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "461ad953-b020-4ff6-8651-2306b3f005f5", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "ca89383e-c425-44fe-9234-3bb222aa869d", "name": "Format not allowed / origin not allowed / tenant suspended.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Forbidden", "code": 403, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "908e7efe-330a-4710-a340-a04c94afd6e6", "name": "Spent operation token, identity swap, terminal request, or idempotency conflict/in-progress operation.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Conflict", "code": 409, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "d64a98a0-37d6-4bba-8260-4a10521ee83f", "name": "Document exceeds the tenant's max size.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Request Entity Too Large", "code": 413, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "0d6a53e2-746d-45c8-92e8-0ef3f4a8690d", "name": "Too many requests.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Too Many Requests", "code": 429, "header": [ { "key": "Content-Type", "value": "application/json" }, { "disabled": false, "description": { "content": "", "type": "text/plain" }, "key": "Retry-After", "value": "60" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "538291d5-e846-42a3-b5cb-1729875266f4", "name": "Validation/TSA/revocation dependency failed transiently; retry with the same Idempotency-Key.", "originalRequest": { "url": { "path": [ "archive" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [] }, "header": [ { "disabled": false, "description": { "content": "(Required) 1-255 visible characters; scoped to provider + service operation.", "type": "text/plain" }, "key": "Idempotency-Key", "value": "string" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": { "mode": "raw", "raw": "{\n \"document\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } } }, "status": "Service Unavailable", "code": 503, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } }, { "id": "bd0ef32b-4b4e-4f62-8819-5a4b7b58d850", "name": "Download timestamp/archive output", "request": { "name": "Download timestamp/archive output", "description": {}, "url": { "path": [ "services", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/octet-stream" } ], "method": "GET", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "ec849c71-7132-44f4-a53b-be07c6934480", "name": "Transformed artifact bytes.", "originalRequest": { "url": { "path": [ "services", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/octet-stream" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/octet-stream" } ], "body": "string", "cookie": [], "_postman_previewlanguage": "text" }, { "id": "3671991a-43c6-4079-81c8-cc3f9a721798", "name": "Missing/invalid credentials or client token.", "originalRequest": { "url": { "path": [ "services", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Unauthorized", "code": 401, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "ddb6479d-df71-4dd4-ab74-70c7ca4f240d", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "services", ":requestId", "document" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "GET", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] }, { "name": "Erasure", "description": "", "item": [ { "id": "eaeb0a87-9982-4f1f-a64a-d3acc0fb9bfb", "name": "Erase one request on demand (GDPR)", "request": { "name": "Erase one request on demand (GDPR)", "description": { "content": "Basic only, scoped to the caller's own provider. A non-terminal request is cancelled first,\nthen its document/container bytes + derived personal data are purged (exactly what the\nretention job strips); a de-identified audit row remains. Idempotent. Bulk erasure lives on\nthe base API (`POST /v1/erasure`) and covers sign requests too.\n", "type": "text/plain" }, "url": { "path": [ "sign", ":requestId", "delete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "type": "any", "value": "{{requestId}}", "key": "requestId", "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" } } ] }, "header": [ { "key": "Accept", "value": "application/json" } ], "method": "POST", "body": {}, "auth": { "type": "basic", "basic": [ { "key": "username", "value": "{{basicAuthUsername}}" }, { "key": "password", "value": "{{basicAuthPassword}}" } ] } }, "response": [ { "id": "5fa95e19-aa3e-490a-a831-edcc9387b4ec", "name": "Erased.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "delete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": {} }, "status": "OK", "code": 200, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"requestId\": \"\",\n \"deleted\": true\n}", "cookie": [], "_postman_previewlanguage": "json" }, { "id": "ab5b9612-e743-4bc9-a25a-6e4ddf6e08d9", "name": "Unknown request.", "originalRequest": { "url": { "path": [ "sign", ":requestId", "delete" ], "host": [ "{{baseUrl}}" ], "query": [], "variable": [ { "disabled": false, "description": { "content": "(Required) ", "type": "text/plain" }, "type": "any", "value": "{{requestId}}", "key": "requestId" } ] }, "header": [ { "key": "Accept", "value": "application/json" }, { "description": { "content": "Added as a part of security scheme: basic", "type": "text/plain" }, "key": "Authorization", "value": "Basic " } ], "method": "POST", "body": {} }, "status": "Not Found", "code": 404, "header": [ { "key": "Content-Type", "value": "application/json" } ], "body": "{\n \"error\": {\n \"code\": \"invalid_document_ref\",\n \"message\": \"\",\n \"requestId\": \"\",\n \"retryable\": true\n }\n}", "cookie": [], "_postman_previewlanguage": "json" } ], "event": [], "protocolProfileBehavior": { "disableBodyPruning": true } } ] } ], "auth": { "type": "basic", "basic": [ { "type": "any", "value": "{{basicAuthUsername}}", "key": "username" }, { "type": "any", "value": "{{basicAuthPassword}}", "key": "password" } ] }, "event": [], "variable": [ { "key": "baseUrl", "value": "https://atk.tvarka.pro/v1" }, { "key": "requestId", "value": "" }, { "key": "documentBase64", "value": "" }, { "key": "personalCode", "value": "" }, { "key": "phoneNumber", "value": "" } ], "info": { "_postman_id": "aaac37a2-0bf8-4171-954e-00fcf6603cbc", "name": "Tvarka ATK - QES Signing API (paid-tier addendum)", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "description": { "content": "The QES half of the ATK API - `/v1/sign/*`. This is the **paid-tier addendum** to\n`tvarka_atk_auth_api.openapi.yaml`: same providers, same credential model, same card stack and\ntwo-phase ceremony; QES adds document assembly, an async validation axis, and metering. The shared\nprimitive schemas + security schemes are mirrored here so this file validates standalone; they are\nidentical to the auth contract.\n\n## Flow (same shape as auth, over a document)\n 1. `POST /v1/sign/requests` (HTTP Basic) - the provider supplies the document (bytes or an\n allow-listed `documentRef`, or a bare `hash` for `format:\"raw\"`), and receives `clientToken`.\n 2. `POST /v1/sign/{requestId}/certificate` (Bearer clientToken) - the client submits the card's\n **signing** certificate; the API prepares the format-specific DTBS and returns it +\n `operationToken`.\n 3. The client drives the card to sign the DTBS with the QES key (after PIN).\n 4. `POST /v1/sign/{requestId}/complete` (Bearer clientToken) - the API verifies the signature,\n assembles + timestamps the AdES container, and returns `status:\"done\"` with\n `validation:{status:\"pending\"}`.\n\n## Smart-ID and Mobile-ID flow\n For `method:\"smart_id\"` or `method:\"mobile_id\"`, create a PAdES request with `personalCode`\n and, for Mobile-ID, `phoneNumber`. The response has a user verification code and no\n `clientToken`; poll GET with Basic credentials or consume the terminal webhook. The\n `/certificate` and `/complete` calls are not used. Remote methods are PAdES-only in v1.3;\n physical/NFC remain available for raw, ASiC-E, and ADOC.\n\n## Two axes: `done` vs `validation`\n * `status:\"done\"` = the container is assembled AND the signer signature is verified. This is the\n deliverable and the **billable** event.\n * `validation.status` transitions `pending -> passed | failed` **asynchronously** (SiVa runs after\n completion). The validator is **advisory, not authoritative** (LT/EU trusted-list snapshots have\n wrongly flagged the primary QTSA); a sub-qualified result raises an alarm for review - it does\n NOT change `status`, invalidate the container, or reverse billing.\n\n## Billing\n One usage event **at completion**, never gated on an advisory validator: `atk.sign` for a signing\n ceremony, and `atk.validate` / `atk.timestamp` / `atk.archive` for the v1.1 synchronous services.\n Auth (`atk.auth`) is a separate, also-invoiceable event; whether a provider/tier is actually\n charged is a pricing decision (ePaslaugos = zero-rated free tier; third parties = metered).\n\n## Timestamp + revocation\n Qualified timestamp uses **APED** as the primary QTSA (BalTstamp fallback; ACCV opt-in for a\n personal tier). The embedded revocation (OCSP) is fetched fresh at signing time and **never cached\n or prefetched** - a cached OCSP response invalidates the signature.\n\n## Get access\n Request a zero-rated sandbox key at (issued after a short\n review). Full docs, rendered reference, and Postman collections at .\n\n\nContact Support:\n Name: Tvarka\n Email: info@tvarka.pro", "type": "text/plain" } } }