Skip to main content
Security

Signed requests for public keys

Sign person ids on your server so Pulseri can trust events from public keys, and turn on enforcement when you are ready.

Public keys now support identity verification. Create a signing secret in Settings, sign each person or group id on your server with HMAC-SHA256, and send the result as signature. Pulseri then trusts that request. Turn on enforcement once every caller signs, and unsigned requests are refused. Until then they still work, but they cannot set an email or change an existing person's name or group.

See the REST API guide.

All changes