Rotate a callback credential

Atomically supersedes a live callback credential with a freshly minted one (same label) and returns the new raw token ONCE. The old credential is revoked in the same transaction. This route does not deduplicate retries. Resending it, even with the same X-Idempotency key, mints another credential.

POST /v1/exceptions/callbacks/credentials/{credentialId}/rotate

Rotate a callback credential

cURL

curl --request POST \
  --url https://matcher.sandbox.lerian.net/v1/exceptions/callbacks/credentials/{credentialId}/rotate \
  --header 'Authorization: Bearer <token>'

201

Example

{
  "createdAt": "<string>",
  "credentialId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "token": "<string>",
  "externalSystem": "<string>",
  "webhookUrlHint": "<string>"
}

Autorizações

Authorization · string · header · obrigatório

Bearer token authentication (format: "Bearer {token}")

Parâmetros de caminho

credentialId · string<uuid> · obrigatório

Id of the live credential to rotate

Exemplo:

"550e8400-e29b-41d4-a716-446655440000"

Resposta

201

application/json

Created

createdAt · string · obrigatório

Mint time (RFC 3339, UTC)

credentialId · string<uuid> · obrigatório

Surrogate id of the minted credential

token · string · obrigatório

Raw bearer token, surfaced exactly once; configure it as the X-Callback-Token header value in the external system. Only its SHA-256 hash is stored server-side.

externalSystem · string

Operator-legible external-system label, echoed for confirmation

webhookUrlHint · string

Informational inbound-callback URL shape to configure in the external system. The {exceptionId} placeholder is filled per callback.