Skip to main content
POST
Rotate the kombify Guard host key

Authorizations

Authorization
string
header
required

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Path Parameters

id
string
required

Resource ID

Body

application/json
new_public_key
object
required
new_key_proof
string
required

DPoP-shaped proof for this request signed by the new key.

emergency
boolean

End the predecessor key at once instead of after the short (two minute) overlap, for a Guard that suspects its key was copied.

Response

Key rotated

data
any

Response payload

meta
object