rest-api manual

Reference for the Asfaload REST API.

Registration

• POST /v1/register_repo — register a new project with the signing server
• POST /v1/update_signers — propose an update to a project’s signers file

Signatures

• POST /v1/signatures — submit signatures for a file
• GET /v1/signatures/{file_path} — query signature collection status for a file
• GET /v1/pending_signatures — list files awaiting the caller’s signature

Files

• GET /v1/files/{file_path} — fetch raw file content from the repository
• GET /v1/files-to-sign/{file_path} — fetch file contents needed for signing

Signers

• GET /v1/get_signers/{file_path} — get the signers configuration for a path
• GET /v1/get_signers_chain/{artifact_path} — get the signers history chain for a signed artifact

Revocation

• POST /v1/revoke — revoke a previously signed file

Assets

• POST /v1/assets — register assets from a GitHub release or checksums files