curl --request GET \
--url "https://directory.example.com/dids/did%3Aopenpayload%3A1111111111111111111111/nonces"
{
"did": "did:openpayload:1111111111111111111111",
"document_nonce": "7",
"alias_nonce": "3",
"root_pubkey_nonce": "1",
"control_nonce": "4",
"policy_nonce": "2"
}
DIDs
Get authorization nonces
Read the counters required to build replay-resistant DID updates
curl --request GET \
--url "https://directory.example.com/dids/did%3Aopenpayload%3A1111111111111111111111/nonces"
{
"did": "did:openpayload:1111111111111111111111",
"document_nonce": "7",
"alias_nonce": "3",
"root_pubkey_nonce": "1",
"control_nonce": "4",
"policy_nonce": "2"
}
A nonce is a number used once. It prevents somebody from capturing a valid signed update and submitting it repeatedly.
Call this endpoint immediately before constructing a signed DID-document mutation. If another mutation is accepted first, fetch the nonces again and rebuild the payload.
Request
string
required
The complete OpenPayload DID whose authorization counters you need.
curl --request GET \
--url "https://directory.example.com/dids/did%3Aopenpayload%3A1111111111111111111111/nonces"
Response
string
required
The DID associated with the returned counters.
string
required
The unsigned 64-bit nonce for DID-document component authorization.
string
The nonce for alias authorization when that runtime contract is available.
string
required
The unsigned 64-bit nonce used for root-public-key rotation authorization.
string
required
The nonce for device changes and DID deactivation.
string
required
The Policy V2 nonce for creating, replacing, or deleting this DID’s delivery policy and changing its delivery constraints.
{
"did": "did:openpayload:1111111111111111111111",
"document_nonce": "7",
"alias_nonce": "3",
"root_pubkey_nonce": "1",
"control_nonce": "4",
"policy_nonce": "2"
}
Treat nonce values as unsigned integer strings. JavaScript numbers cannot represent every
u64 value safely.Straight to the point
GET /dids/{url-encoded-did}/nonces
- Authentication: none
- Use the returned nonce in the next authorization payload
- Fetch again after a
409 nonce_mismatch - Persona counters use
GET /personas/{persona}/nonces
Authorization explained
Learn how the nonce, canonical payload, expiration, and signature fit together.