Iniciar una importación de clave de firma BYOK Modelo A (SaaS)

curl --request POST \
  --url https://slc.sandbox.lerian.net/v1/signing-key/import-params \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://slc.sandbox.lerian.net/v1/signing-key/import-params"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://slc.sandbox.lerian.net/v1/signing-key/import-params', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://slc.sandbox.lerian.net/v1/signing-key/import-params",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://slc.sandbox.lerian.net/v1/signing-key/import-params"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://slc.sandbox.lerian.net/v1/signing-key/import-params")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "importTokenBase64": "<string>",
  "keyId": "<string>",
  "wrappingPublicKeyBase64": "<string>",
  "expiresAt": "<string>"
}

{
  "code": "<string>",
  "detail": "<string>",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "<string>",
  "status": 123,
  "title": "<string>",
  "type": "about:blank"
}

{
  "code": "<string>",
  "detail": "<string>",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "<string>",
  "status": 123,
  "title": "<string>",
  "type": "about:blank"
}

Iniciar una importación de clave de firma BYOK Modelo A (SaaS)

Crea una clave KMS nueva de origen EXTERNAL para el tenant del llamante y devuelve la clave pública de envoltura + el token de importación que el tenant usa para envolver su material de clave privada ICP-Brasil LOCALMENTE (Modelo A — el SLC nunca ve la clave privada en texto plano). RBAC: signing-key:import (rol de aprovisionamiento solo para admin). Idempotente mediante el encabezado Idempotency-Key OBLIGATORIO.

POST

signing-key

import-params

curl --request POST \
  --url https://slc.sandbox.lerian.net/v1/signing-key/import-params \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://slc.sandbox.lerian.net/v1/signing-key/import-params"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://slc.sandbox.lerian.net/v1/signing-key/import-params', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://slc.sandbox.lerian.net/v1/signing-key/import-params",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://slc.sandbox.lerian.net/v1/signing-key/import-params"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://slc.sandbox.lerian.net/v1/signing-key/import-params")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "importTokenBase64": "<string>",
  "keyId": "<string>",
  "wrappingPublicKeyBase64": "<string>",
  "expiresAt": "<string>"
}

{
  "code": "<string>",
  "detail": "<string>",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "<string>",
  "status": 123,
  "title": "<string>",
  "type": "about:blank"
}

{
  "code": "<string>",
  "detail": "<string>",
  "errors": [
    {
      "location": "<string>",
      "message": "<string>",
      "value": "<unknown>"
    }
  ],
  "instance": "<string>",
  "status": 123,
  "title": "<string>",
  "type": "about:blank"
}

Autorizaciones

Authorization

string

header

requerido

JWT bearer token issued by the identity provider.

Encabezados

Idempotency-Key

string

Idempotency key for safe retries (MANDATORY: each call mints a real, billable AWS KMS key).

Ejemplo:

"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

Respuesta

importTokenBase64

string

requerido

Base64-encoded opaque KMS import token to pass back on the complete-import call.

keyId

string

requerido

KMS key id created for this import.

Ejemplo:

"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"

wrappingPublicKeyBase64

string

requerido

Base64-encoded PUBLIC wrapping key (DER) used to wrap the private key locally.

expiresAt

string

Import-token expiry (RFC3339 UTC); omitted when zero.

Ejemplo:

"2026-06-15T07:50:00Z"

⌘I

Pix — Lerian SPI (mensajería nativa)

Pix — JD (interfaz, directo)

Pix — BTG (interfaz, indirecto)

TED — Lerian SPB (mensajería nativa)

TED — JD (interfaz)

Boletos — BTG (interfaz)

Lerian SILOC (mensajería nativa)

Lerian SLC (mensajería nativa)

Lerian STA (mensajería nativa)

Lerian SISBAJUD (mensajería nativa)

Lerian Consignado (mensajería nativa)

Iniciar una importación de clave de firma BYOK Modelo A (SaaS)

Autorizaciones

Encabezados

Respuesta