Auth
Generate Signature
Use this API to generate a secure signature for Permission Provider responses. The signature validates the integrity of permission decisions returned from your authorization service.
Security Critical: This endpoint must be called from your backend server, never from client-side code. The signature ensures that permission responses haven’t been tampered with.
Use Case:
This API is used in conjunction with the Permission Provider configuration mode. When your onResourceAccessRequired function is called, use this endpoint to generate a secure signature for your permission response.
Key Points:
- Each permission object must include userId, resourceId, type, and hasAccess
- For document resources, can specify
accessRole:vieweroreditor - Optional
expiresAttimestamp (in milliseconds) for time-limited permissions - Resource types:
document,folder, ororganization
📚 Full Documentation: https://docs.velt.dev/api-reference/rest-apis/v2/auth/generate-signature