Skip to main content

OrgSigningKey

The public half of a key an organization signs its players' sign-in assertions with (exchangeManagedPlayerAssertion). Only public keys are stored.

type OrgSigningKey {
  keyId: BigInt!
  orgId: BigInt!
  kid: String!
  algorithm: String!
  publicJwk: String!
  issuer: String!
  audience: String
  appIds: [BigInt!]
  label: String
  createdAt: DateTime!
  revokedAt: DateTime
}

Fields​

OrgSigningKey.keyId ● BigInt! non-null scalar​

The key’s id here.

OrgSigningKey.orgId ● BigInt! non-null scalar​

OrgSigningKey.kid ● String! non-null scalar​

The kid an assertion’s header names to pick this key.

OrgSigningKey.algorithm ● String! non-null scalar​

'EdDSA', 'ES256' or 'RS256'.

OrgSigningKey.publicJwk ● String! non-null scalar​

The public key, as a JWK (JSON).

OrgSigningKey.issuer ● String! non-null scalar​

The iss an assertion must carry.

OrgSigningKey.audience ● String scalar​

The aud an assertion must include; null means ck:app:<appId> for the app it signs in to.

OrgSigningKey.appIds ● [BigInt!] list scalar​

The apps the key signs players in to; null means every app of the organization.

OrgSigningKey.label ● String scalar​

OrgSigningKey.createdAt ● DateTime! non-null scalar​

OrgSigningKey.revokedAt ● DateTime scalar​

When the key was revoked; a revoked key verifies nothing.

Returned By​

orgSigningKeys query ● registerOrgSigningKey mutation