GET/auth/user-identity/{userId}
Get a complete user identity
Operation auth.userIdentity
Description
Returns a user's registered signing and encapsulation public keys and fingerprints. Clients never trust the answer alone: they compare it with an identity link or an existing identity pin before using the keys. Any signed-in user may call it; an unknown user returns 404.
Authentication
Requires a signed-in session: the client sends its session token as a bearer token in the Authorization header.
Parameters
| Name | In | Type | Details |
|---|---|---|---|
userId | path | string | required |
Responses
200 OK
application/jsonUserIdentityResponse
A user's registered public keys. Clients trust them only after matching an identity link or an existing identity pin.
5 fields
encapsulationKeyFingerprintstringrequired- exactly 64 characters
- lowercase hexadecimal
SHA-256 fingerprint of
encapsulationPublicKey.encapsulationPublicKeystringrequiredBase64 ML-KEM-1024 public key.
signingKeyFingerprintstringrequired- exactly 64 characters
- lowercase hexadecimal
SHA-256 fingerprint of
signingPublicKey.signingPublicKeystringrequiredBase64 ML-DSA-87 public key.
userIdstringrequired
Other fields are allowed.
Other responses
| Status | Meaning | Body |
|---|---|---|
| 401 | Unauthorized |
|
| 404 | Not Found |
|
| 500 | Internal Server Error |
|
| 503 | Service Unavailable |
|