The purpose of the interim key-storage is to get online with an common a temporary AB for the early-adapting participants of the Mobile Ticket SpecificationSpecifications. This is not an a complete AB as we believe there are more functions to come. The API is based upon the same principles as the coming API-specs from the project, but the permanent solution will be more detailed.
The interim solution for key storage is divided into two parts:
- The key storage where everyone can fetch the key-list on an open url. The keylist can be fetched from http://api.mobileticket.se/keylist The keylist is updated every 5 minutes.
- The key handling in which an a client with an a PID via email can send in an new public keypublish or remove public keys.
Keylist
The keylist can be fetched from <URL>
Key handling
{
"alg": 'EC',
"kid": string <kid defined from the AB>,
"authid": string <your PID> ,
"notvalidafter": integer (unix timestamp),
"serial": integer (serialNumber),
}
The JWS Payload shall contain the following fields:
{
'mtbPublicKeys' [ JWK Object, JWK Object .. JWK Object ],
}