Lithic API Documentation | Auth Stream Enrollment › Retrieve The Asa Hmac Secret Key

Auth Stream Enrollment

auth_stream_enrollment

Methods

Retrieve The Asa Hmac Secret Key ->

get/v1/auth_stream/secret

Retrieve the ASA HMAC secret key. If one does not exist for your program yet, calling this endpoint will create one for you. The headers (which you can use to verify webhooks) will begin appearing shortly after calling this endpoint for the first time. See this page for more detail about verifying ASA webhooks.

Response fields

AuthStreamSecret

Request example

curl https://api.lithic.com/v1/auth_stream/secret \
    -H "Authorization: $LITHIC_API_KEY"

200Example

{
  "secret": "whsec_1NDsYinMGr951KuDEaj78VtWzlyPaOnwUVagFiWIPJs="
}

Rotate The Asa Hmac Secret Key ->

post/v1/auth_stream/secret/rotate

Generate a new ASA HMAC secret key. The old ASA HMAC secret key will be deactivated 24 hours after a successful request to this endpoint. Make a GET /auth_stream/secret request to retrieve the new secret key.

Domain types

AuthStreamSecret = { secret }