diff --git a/mintlify/openapi.yaml b/mintlify/openapi.yaml index 8c1d0abe..e5985fe0 100644 --- a/mintlify/openapi.yaml +++ b/mintlify/openapi.yaml @@ -3682,10 +3682,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned in a prior `202` response, echoed back on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. + description: The `requestId` returned in a prior `202` response, echoed back exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: @@ -3767,10 +3767,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned in a prior `202` response, echoed back on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. + description: The `requestId` returned in a prior `202` response, echoed back exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: @@ -3950,10 +3950,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned in a prior `202` response, echoed back on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry when registering a credential; must be paired with `Grid-Wallet-Signature`. + description: The `requestId` returned in a prior `202` response, echoed back exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry when registering a credential; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: @@ -4033,21 +4033,21 @@ paths: value: type: EMAIL_OTP payloadToSign: '{"requestId":"7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21","type":"EMAIL_OTP","accountId":"InternalAccount:01HF3Z4QWERTY","expiresAt":"2026-04-08T15:35:00Z"}' - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' oauth: summary: Additional OAuth credential challenge value: type: OAUTH payloadToSign: Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg== - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' passkey: summary: Additional passkey credential challenge value: type: PASSKEY payloadToSign: Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg== - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' '400': description: Bad request. Returned with `EMAIL_OTP_CREDENTIAL_ALREADY_EXISTS` or `PASSKEY_CREDENTIAL_ALREADY_EXISTS` when registering a credential type that already exists on the internal account. Only one email OTP credential and one passkey credential are supported per internal account at this time. @@ -4180,10 +4180,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned in a prior `202` response, echoed back on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. + description: The `requestId` returned in a prior `202` response, echoed back exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 responses: '202': description: Challenge issued. The response contains `payloadToSign` plus a `requestId`. Build an API-key stamp over `payloadToSign` with the session API keypair of an existing verified credential on the same internal account (other than the one being revoked), then echo `requestId` on the retry. @@ -4241,10 +4241,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned alongside the Grid-issued `challenge` from `POST /auth/credentials/{id}/challenge`, echoed back here so Grid can correlate the assertion with the pending challenge. + description: The `requestId` returned alongside the Grid-issued `challenge` from `POST /auth/credentials/{id}/challenge`, echoed back exactly here so Grid can correlate the assertion with the pending challenge. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: @@ -4370,7 +4370,7 @@ paths: createdAt: '2026-04-08T15:30:01Z' updatedAt: '2026-04-08T15:35:00Z' challenge: VjZ6o8KfE9V3q3LkR2nH5eZ6dM8yA1xW - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' '400': description: Bad request @@ -4483,10 +4483,10 @@ paths: - name: Request-Id in: header required: false - description: The `requestId` returned in a prior `202` response, echoed back on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. + description: The `requestId` returned in a prior `202` response, echoed back exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 responses: '202': description: Challenge issued. The response contains `payloadToSign` plus a `requestId`. Build an API-key stamp over `payloadToSign` with the session API keypair of a verified session on the same internal account, then echo `requestId` on the retry. @@ -15762,8 +15762,8 @@ components: example: Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg== requestId: type: string - description: Unique identifier for this request. Must be echoed in the `Request-Id` header on the signed retry so the server can correlate the retry with the issued challenge. - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + description: Grid-issued `Request:` identifier for this pending request. Echo this value exactly in the `Request-Id` header on the signed retry so the server can correlate the retry with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time @@ -16228,8 +16228,8 @@ components: example: VjZ6o8KfE9V3q3LkR2nH5eZ6dM8yA1xW requestId: type: string - description: Unique identifier for this pending passkey authentication request. Must be echoed as the `Request-Id` header on the subsequent `POST /auth/credentials/{id}/verify` call so Grid can correlate the assertion with the issued challenge. - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + description: Grid-issued `Request:` identifier for this pending passkey authentication request. Echo this value exactly as the `Request-Id` header on the subsequent `POST /auth/credentials/{id}/verify` call so Grid can correlate the assertion with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time diff --git a/mintlify/snippets/global-accounts/authentication.mdx b/mintlify/snippets/global-accounts/authentication.mdx index 0f2bd3ee..c9c897e5 100644 --- a/mintlify/snippets/global-accounts/authentication.mdx +++ b/mintlify/snippets/global-accounts/authentication.mdx @@ -588,7 +588,7 @@ Requires an active session on an *existing* credential on the same account. The { "type": "EMAIL_OTP", "payloadToSign": "{\"requestId\":\"7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21\",\"type\":\"EMAIL_OTP\",\"accountId\":\"EmbeddedWallet:019542f5-b3e7-1d02-0000-000000000002\",\"expiresAt\":\"2026-04-08T15:35:00Z\"}", - "requestId": "7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21", + "requestId": "Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21", "expiresAt": "2026-04-08T15:35:00Z" } ``` @@ -604,7 +604,7 @@ Requires an active session on an *existing* credential on the same account. The -u "$GRID_CLIENT_ID:$GRID_CLIENT_SECRET" \ -H "Content-Type: application/json" \ -H "Grid-Wallet-Signature: MEUCIQDx7k2N0aK4p8f3vR9J6yT5wL1mB0sXnG2hQ4vJ8zYkCgIgZ4rP9dT7eWfU3oM6KjR1qSpNvBwL0tXyA2iG8fH5dE=" \ - -H "Request-Id: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21" \ + -H "Request-Id: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21" \ -d '{ "type": "EMAIL_OTP", "accountId": "EmbeddedWallet:019542f5-b3e7-1d02-0000-000000000002", @@ -640,7 +640,7 @@ A credential is revoked by signing with a session from **a different credential { "type": "PASSKEY", "payloadToSign": "Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg==", - "requestId": "9f7a2c10-5e88-4fb1-bd0e-1c3a8e7b2d45", + "requestId": "Request:9f7a2c10-5e88-4fb1-bd0e-1c3a8e7b2d45", "expiresAt": "2026-04-08T15:35:00Z" } ``` @@ -653,7 +653,7 @@ A credential is revoked by signing with a session from **a different credential curl -X DELETE "$GRID_BASE_URL/auth/credentials/AuthMethod:019542f5-b3e7-1d02-0000-000000000001" \ -u "$GRID_CLIENT_ID:$GRID_CLIENT_SECRET" \ -H "Grid-Wallet-Signature: MEUCIQDx7k2N0aK4p8f3vR9J6yT5wL1mB0sXnG2hQ4vJ8zYkCgIgZ4rP9dT7eWfU3oM6KjR1qSpNvBwL0tXyA2iG8fH5dE=" \ - -H "Request-Id: 9f7a2c10-5e88-4fb1-bd0e-1c3a8e7b2d45" + -H "Request-Id: Request:9f7a2c10-5e88-4fb1-bd0e-1c3a8e7b2d45" ``` **Response:** `204 No Content`. All active sessions issued by the revoked credential are also revoked. diff --git a/mintlify/snippets/global-accounts/exporting-wallet.mdx b/mintlify/snippets/global-accounts/exporting-wallet.mdx index 9624c18a..558fea93 100644 --- a/mintlify/snippets/global-accounts/exporting-wallet.mdx +++ b/mintlify/snippets/global-accounts/exporting-wallet.mdx @@ -37,7 +37,7 @@ sequenceDiagram ```json { "payloadToSign": "Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg==", - "requestId": "c3f8a614-47e2-4a19-9f5d-2b0a91d47e08", + "requestId": "Request:c3f8a614-47e2-4a19-9f5d-2b0a91d47e08", "expiresAt": "2026-04-19T12:10:00Z" } ``` @@ -51,7 +51,7 @@ sequenceDiagram -u "$GRID_CLIENT_ID:$GRID_CLIENT_SECRET" \ -H "Content-Type: application/json" \ -H "Grid-Wallet-Signature: MEUCIQDx7k2N0aK4p8f3vR9J6yT5wL1mB0sXnG2hQ4vJ8zYkCgIgZ4rP9dT7eWfU3oM6KjR1qSpNvBwL0tXyA2iG8fH5dE=" \ - -H "Request-Id: c3f8a614-47e2-4a19-9f5d-2b0a91d47e08" \ + -H "Request-Id: Request:c3f8a614-47e2-4a19-9f5d-2b0a91d47e08" \ -d '{ "clientPublicKey": "04f45f2a22c908b9ce09a7150e514afd24627c401c38a4afc164e1ea783adaaa31d4245acfb88c2ebd42b47628d63ecabf345484f0a9f665b63c54c897d5578be2" }' diff --git a/mintlify/snippets/global-accounts/managing-sessions.mdx b/mintlify/snippets/global-accounts/managing-sessions.mdx index 4966b698..8974f70d 100644 --- a/mintlify/snippets/global-accounts/managing-sessions.mdx +++ b/mintlify/snippets/global-accounts/managing-sessions.mdx @@ -53,7 +53,7 @@ Session revocation uses the same ` identifier for this pending request. Echo this value exactly in the `Request-Id` header on the signed retry so the server can correlate the retry with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time @@ -16228,8 +16228,8 @@ components: example: VjZ6o8KfE9V3q3LkR2nH5eZ6dM8yA1xW requestId: type: string - description: Unique identifier for this pending passkey authentication request. Must be echoed as the `Request-Id` header on the subsequent `POST /auth/credentials/{id}/verify` call so Grid can correlate the assertion with the issued challenge. - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + description: Grid-issued `Request:` identifier for this pending passkey authentication request. Echo this value exactly as the `Request-Id` header on the subsequent `POST /auth/credentials/{id}/verify` call so Grid can correlate the assertion with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time diff --git a/openapi/components/schemas/auth/PasskeyAuthChallenge.yaml b/openapi/components/schemas/auth/PasskeyAuthChallenge.yaml index ce8b23e1..cadb7b14 100644 --- a/openapi/components/schemas/auth/PasskeyAuthChallenge.yaml +++ b/openapi/components/schemas/auth/PasskeyAuthChallenge.yaml @@ -28,11 +28,12 @@ allOf: requestId: type: string description: >- - Unique identifier for this pending passkey authentication - request. Must be echoed as the `Request-Id` header on the - subsequent `POST /auth/credentials/{id}/verify` call so Grid - can correlate the assertion with the issued challenge. - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + Grid-issued `Request:` identifier for this pending passkey + authentication request. Echo this value exactly as the + `Request-Id` header on the subsequent + `POST /auth/credentials/{id}/verify` call so Grid can correlate + the assertion with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time diff --git a/openapi/components/schemas/common/SignedRequestChallenge.yaml b/openapi/components/schemas/common/SignedRequestChallenge.yaml index d5b22268..23e1f65b 100644 --- a/openapi/components/schemas/common/SignedRequestChallenge.yaml +++ b/openapi/components/schemas/common/SignedRequestChallenge.yaml @@ -24,10 +24,10 @@ properties: requestId: type: string description: >- - Unique identifier for this request. Must be echoed in the - `Request-Id` header on the signed retry so the server can - correlate the retry with the issued challenge. - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + Grid-issued `Request:` identifier for this pending request. + Echo this value exactly in the `Request-Id` header on the signed + retry so the server can correlate the retry with the issued challenge. + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: type: string format: date-time diff --git a/openapi/paths/auth/auth_credentials.yaml b/openapi/paths/auth/auth_credentials.yaml index f60cb266..d02637f1 100644 --- a/openapi/paths/auth/auth_credentials.yaml +++ b/openapi/paths/auth/auth_credentials.yaml @@ -44,13 +44,13 @@ post: in: header required: false description: >- - The `requestId` returned in a prior `202` response, echoed back on - the signed retry so the server can correlate it with the issued - challenge. Required on the signed retry when registering a - credential; must be paired with `Grid-Wallet-Signature`. + The `requestId` returned in a prior `202` response, echoed back + exactly on the signed retry so the server can correlate it with + the issued challenge. Required on the signed retry when registering + a credential; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: @@ -142,21 +142,21 @@ post: value: type: EMAIL_OTP payloadToSign: '{"requestId":"7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21","type":"EMAIL_OTP","accountId":"InternalAccount:01HF3Z4QWERTY","expiresAt":"2026-04-08T15:35:00Z"}' - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' oauth: summary: Additional OAuth credential challenge value: type: OAUTH payloadToSign: Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg== - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' passkey: summary: Additional passkey credential challenge value: type: PASSKEY payloadToSign: Y2hhbGxlbmdlLXBheWxvYWQtdG8tc2lnbg== - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' '400': description: >- diff --git a/openapi/paths/auth/auth_credentials_{id}.yaml b/openapi/paths/auth/auth_credentials_{id}.yaml index a763eddc..2531d3a5 100644 --- a/openapi/paths/auth/auth_credentials_{id}.yaml +++ b/openapi/paths/auth/auth_credentials_{id}.yaml @@ -56,12 +56,12 @@ delete: required: false description: >- The `requestId` returned in a prior `202` response, echoed back - on the signed retry so the server can correlate it with the + exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 responses: '202': description: >- diff --git a/openapi/paths/auth/auth_credentials_{id}_challenge.yaml b/openapi/paths/auth/auth_credentials_{id}_challenge.yaml index e537e4c2..95ad6234 100644 --- a/openapi/paths/auth/auth_credentials_{id}_challenge.yaml +++ b/openapi/paths/auth/auth_credentials_{id}_challenge.yaml @@ -97,7 +97,7 @@ post: createdAt: '2026-04-08T15:30:01Z' updatedAt: '2026-04-08T15:35:00Z' challenge: VjZ6o8KfE9V3q3LkR2nH5eZ6dM8yA1xW - requestId: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + requestId: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 expiresAt: '2026-04-08T15:35:00Z' '400': description: Bad request diff --git a/openapi/paths/auth/auth_credentials_{id}_verify.yaml b/openapi/paths/auth/auth_credentials_{id}_verify.yaml index a93d952e..f0ffd525 100644 --- a/openapi/paths/auth/auth_credentials_{id}_verify.yaml +++ b/openapi/paths/auth/auth_credentials_{id}_verify.yaml @@ -43,11 +43,11 @@ post: required: false description: >- The `requestId` returned alongside the Grid-issued `challenge` from - `POST /auth/credentials/{id}/challenge`, echoed back here so Grid - can correlate the assertion with the pending challenge. + `POST /auth/credentials/{id}/challenge`, echoed back exactly here + so Grid can correlate the assertion with the pending challenge. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: diff --git a/openapi/paths/auth/auth_sessions_{id}.yaml b/openapi/paths/auth/auth_sessions_{id}.yaml index 6653b479..af3a7ef0 100644 --- a/openapi/paths/auth/auth_sessions_{id}.yaml +++ b/openapi/paths/auth/auth_sessions_{id}.yaml @@ -43,12 +43,12 @@ delete: required: false description: >- The `requestId` returned in a prior `202` response, echoed back - on the signed retry so the server can correlate it with the + exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 responses: '202': description: >- diff --git a/openapi/paths/internal_accounts/internal_accounts_{id}_email.yaml b/openapi/paths/internal_accounts/internal_accounts_{id}_email.yaml index 709e0eb9..a046e28d 100644 --- a/openapi/paths/internal_accounts/internal_accounts_{id}_email.yaml +++ b/openapi/paths/internal_accounts/internal_accounts_{id}_email.yaml @@ -49,12 +49,12 @@ patch: required: false description: >- The `requestId` returned in a prior `202` response, echoed back - on the signed retry so the server can correlate it with the + exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: diff --git a/openapi/paths/internal_accounts/internal_accounts_{id}_export.yaml b/openapi/paths/internal_accounts/internal_accounts_{id}_export.yaml index ff811935..89185e16 100644 --- a/openapi/paths/internal_accounts/internal_accounts_{id}_export.yaml +++ b/openapi/paths/internal_accounts/internal_accounts_{id}_export.yaml @@ -63,12 +63,12 @@ post: required: false description: >- The `requestId` returned in a prior `202` response, echoed back - on the signed retry so the server can correlate it with the + exactly on the signed retry so the server can correlate it with the issued challenge. Required on the signed retry; must be paired with `Grid-Wallet-Signature`. schema: type: string - example: 7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 + example: Request:7c4a8d09-ca37-4e3e-9e0d-8c2b3e9a1f21 requestBody: required: true content: