English
Tiếng Việt Trusted SIC signing
Request, approval, WebAuthn, activation, routing, signing, ASiC and evidence.
Open →TRUNG TÂM API QUANTUMSAFE
Hiểu vòng đời tài nguyên trước, sau đó sử dụng hợp đồng máy đọc.
Tài liệu HTML giải thích mục đích nghiệp vụ, chuyển trạng thái, phân quyền, idempotency, callback, bằng chứng và hành vi lỗi. OpenAPI YAML/JSON và Postman là định dạng xuất, không phải hành trình chính.
01
Hành trình API
Authentication & trust
OAuth2/OIDC, mTLS, scopes, request signatures and tenant/RP identity.
Open →Resource lifecycle
Signing states, cancellation, expiry, retry and partial verification.
Open →Webhooks & events
Subscription, signature validation, delivery, replay and retry.
Open →Errors & operations
RFC 9457 problem details, rate limits, timeouts and retries.
Open →SDKs & samples
cURL, Java 21, C#, JavaScript and Python.
Open →Interactive explorer
Browser-local mock explorer with safe sample data.
Open →Specifications
OpenAPI YAML/JSON, Postman and legacy architecture skeleton.
Open →02
Kiểm soát yêu cầu dùng chung
| Control | Contract |
|---|---|
| Authorization | OAuth2 scope and/or mTLS identity by operation |
| X-Correlation-Id | End-to-end diagnostic and evidence correlation |
| Idempotency-Key | Required for create/activation/signing/packaging operations |
| X-Request-Timestamp | Freshness control where signed requests are enabled |
| X-Request-Signature | Optional/required by channel policy |
| traceparent | Distributed tracing without exposing sensitive payloads |
| application/problem+json | RFC 9457-style error response |