Web Bot Auth signing-key directory (RFC 9421)
Returns a JWK Set advertising the Ed25519 public key Charming uses to sign outbound HTTP messages. Single-entry today: { keys: [{ kty: "OKP", crv: "Ed25519", kid, x, nbf, exp }] }. Content-Type: application/jwk-set+json, Cache-Control: public, max-age=600. Storage v0: key is pinned via env vars or generated ephemerally per boot until WEB_BOT_AUTH_PUBLIC_JWK/WEB_BOT_AUTH_KID/WEB_BOT_AUTH_NBF are set on Railway.
GET
/.well-known/http-message-signatures-directoryResponses
200JWK Set with the active Web Bot Auth signing key(s).
objectRequest
curl -X GET "https://charm.ing/.well-known/http-message-signatures-directory"const response = await fetch("https://charm.ing/.well-known/http-message-signatures-directory", {
method: "GET"
});import requests
response = requests.get(
"https://charm.ing/.well-known/http-message-signatures-directory",
)Response
{}