Skip to content

Apply an advanced e-signature with a fresh signing PIN

POST
/api/v1/signatures/sign
curl --request POST \
--url https://app.avera.io/api/v1/signatures/sign \
--header 'Content-Type: application/json' \
--data '{ "targetType": "ITEM", "targetId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "signaturePurpose": "AUTHOR", "signatureMeaning": "example", "signingFactor": { "type": "PIN", "value": "example" }, "signaturePolicyId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" }'

Requires the caller’s signing PIN in signingFactor.value, verified freshly for this one signing event: no cached or recently-authenticated shortcut exists. The canonical document hash is computed and cryptographically signed with the caller’s certificate from the internal CA, and the signature is persisted with the full three-layer evidence. Only the PIN factor is supported.

Media typeapplication/json
object
targetType
required
string
Allowed values: ITEM ATTACHMENT RECORD CONFIGURATION_VERSION
targetId
required
string format: uuid
signaturePurpose
required
string
Allowed values: AUTHOR REVIEWER APPROVER WITNESS ACKNOWLEDGEMENT QUALITY_RELEASE REGULATORY_SUBMISSION
signatureMeaning
required
string
0 <= 512 characters
signingFactor
required
object
type
required
string
Allowed values: PIN WEBAUTHN TOTP QES_QTSP
value
required
string
>= 1 characters
signaturePolicyId
string | null format: uuid

OK

Media type*/*
object
id
required
string format: uuid
tenantId
required
string format: uuid
signatureNumber
required
string
targetType
required
string
Allowed values: ITEM ATTACHMENT RECORD CONFIGURATION_VERSION
targetId
required
string format: uuid
targetVersion
required
integer format: int64
documentHash
required
string
documentHashAlgorithm
required
string
signaturePurpose
required
string
Allowed values: AUTHOR REVIEWER APPROVER WITNESS ACKNOWLEDGEMENT QUALITY_RELEASE REGULATORY_SUBMISSION
signatureLevel
required
string
Allowed values: SIMPLE ADVANCED ADVANCED_STRONG QUALIFIED QUALIFIED_TIMESTAMPED
signatureMeaning
required
string
signerUserId
required
string format: uuid
signerHomeTenantId
string | null format: uuid
participationId
required
string format: uuid
participationScope
required
string
Allowed values: INTERNAL EXTERNAL SUPPORT
signerName
required
string
signerEmail
required
string
signerOrganization
string | null
identityAssertedVia
required
string
Allowed values: LOCAL SSO DIRECTORY_SYNC STAFF_SSO
vendorUserId
string | null
identityAssertedAt
required
string format: date-time
signingFactorType
string | null
Allowed values: PIN WEBAUTHN TOTP QES_QTSP
signingFactorVerifiedAt
string | null format: date-time
signedAt
required
string format: date-time
status
required
string
Allowed values: VALID REVOKED EXPIRED SUPERSEDED
revokedAt
string | null format: date-time
revokedBy
string | null format: uuid
revocationReason
string | null
signaturePolicyId
string | null format: uuid