[{"data":1,"prerenderedAt":44},["ShallowReactive",2],{"content:changelog:\u002Fchangelog\u002F2026-10-19-signed-public-key-requests":3},{"id":4,"title":5,"body":6,"canonical":31,"date":32,"description":33,"draft":34,"extension":35,"locale":36,"meta":37,"navigation":38,"noindex":34,"og":31,"path":39,"seo":40,"stem":41,"tag":42,"updated":32,"__hash__":43},"changelog\u002Fchangelog\u002F2026-10-19-signed-public-key-requests.md","Signed requests for public keys",{"type":7,"value":8,"toc":27},"minimark",[9,18],[10,11,12,13,17],"p",{},"Public keys now support identity verification. Create a signing secret in Settings, sign each person or group id on your server with HMAC-SHA256, and send the result as ",[14,15,16],"code",{},"signature",". Pulseri then trusts that request. Turn on enforcement once every caller signs, and unsigned requests are refused. Until then they still work, but they cannot set an email or change an existing person's name or group.",[10,19,20,21,26],{},"See the ",[22,23,25],"a",{"href":24},"\u002Fintegrations\u002Frest-api","REST API guide",".",{"title":28,"searchDepth":29,"depth":29,"links":30},"",2,[],null,"2026-10-19","Sign person ids on your server so Pulseri can trust events from public keys, and turn on enforcement when you are ready.",false,"md","en",{},true,"\u002Fchangelog\u002F2026-10-19-signed-public-key-requests",{"title":5,"description":33},"changelog\u002F2026-10-19-signed-public-key-requests","security","gLlhpf_8R8rKYBKWNu-0AhOSAv40lJ4llxODTIWdR4o",1793908078990]