[{"data":1,"prerenderedAt":67},["ShallowReactive",2],{"content:changelog:\u002Fchangelog\u002F2026-10-23-signatures-separate-people-and-groups":3},{"id":4,"title":5,"body":6,"canonical":54,"date":55,"description":56,"draft":57,"extension":58,"locale":59,"meta":60,"navigation":61,"noindex":57,"og":54,"path":62,"seo":63,"stem":64,"tag":65,"updated":55,"__hash__":66},"changelog\u002Fchangelog\u002F2026-10-23-signatures-separate-people-and-groups.md","Signatures now tell people and groups apart",{"type":7,"value":8,"toc":50},"minimark",[9,37],[10,11,12,13,17,18,21,22,25,26,17,29,32,33,36],"p",{},"A signature for a group could be reused for a person whose id was the same, for example user 7 and company 7. Signatures are now made over ",[14,15,16],"code",{},"person:\u003Cid>"," for ",[14,19,20],{},"\u002Fidentify"," and ",[14,23,24],{},"\u002Ftrack",", and over ",[14,27,28],{},"group:\u003Cid>",[14,30,31],{},"\u002Fgroup",". A signature of the bare id is no longer accepted and gets ",[14,34,35],{},"401 invalid_signature",".",[10,38,39,40,45,46,36],{},"Change your server to sign with the prefix. The secret stays the same. Code examples are in the ",[41,42,44],"a",{"href":43},"\u002Fintegrations\u002Frest-api","REST API guide"," and on ",[41,47,49],{"href":48},"\u002Fproduct\u002Fapi-and-assistants","how signing works",{"title":51,"searchDepth":52,"depth":52,"links":53},"",2,[],null,"2026-10-23","Identity verification signatures are over a person: or group: prefix, so a group signature can never pass for a person with the same id.",false,"md","en",{},true,"\u002Fchangelog\u002F2026-10-23-signatures-separate-people-and-groups",{"title":5,"description":56},"changelog\u002F2026-10-23-signatures-separate-people-and-groups","security","hOqiYzz-1G3Q2cWnAjASR5EdieOGBY8aiFmnSUd3taI",1793908078895]