Skip to content
Charming Docs
Esc
navigateopen⌘Jpreview

Web Bot Auth signing-key directory (RFC 9421)

Returns a JWK Set advertising the Ed25519 public key Charming uses to sign outbound HTTP messages. Single-entry today: { keys: [{ kty: "OKP", crv: "Ed25519", kid, x, nbf, exp }] }. Content-Type: application/jwk-set+json, Cache-Control: public, max-age=600. Storage v0: key is pinned via env vars or generated ephemerally per boot until WEB_BOT_AUTH_PUBLIC_JWK/WEB_BOT_AUTH_KID/WEB_BOT_AUTH_NBF are set on Railway.

GET/.well-known/http-message-signatures-directory
Responses
200JWK Set with the active Web Bot Auth signing key(s).
object
Request
curl -X GET "https://charm.ing/.well-known/http-message-signatures-directory"
Response
{}