Contents

POST /management/auditors#

This request will be used to enable an auditor.

Request:

The request must be a AuditorSetupMessage.

Response:

204 No content:

The auditor was successfully enabled.

403 Forbidden:

The master signature is invalid.

409 Conflict:

The exchange has a more recent request related to this auditor key (replay detected).

Details:

interface AuditorSetupMessage {

  // Base URL of the auditor.
  auditor_url: string;

  // Human-readable name of the auditor.
  auditor_name: string;

  // The auditor's EdDSA signing public key.
  auditor_pub: EddsaPublicKey;

  // Signature by the exchange master ke yover a
  // TALER_MasterAddAuditorPS.
  // Must have purpose TALER_SIGNATURE_MASTER_ADD_AUDITOR.
  master_sig: EddsaSignature;

  // When does the auditor become active?
  // Should be the time when the signature was created,
  // using the (monotonic!) local time of the system
  // with the offline master public key. Note that
  // even if the time is in the future, the auditor will
  // become active immediately! Used ONLY to detect replay attacks.
  validity_start: Timestamp;

}