List audit checkpoints

Signed checkpoints for this organisation’s audit chain, including public verification metadata. Checkpoint rows are read through the reporting connection and are always limited to this organisation’s chain; private signing keys are never exposed.

Quire permissions

Required capability: report/viewAudit.

Credential scopes: audit:read.

The acting subject must also be allowed to perform this action in the organisation.

GET

https://your-organisation.quirelms.com/api/v1/audit_checkpoints

View as Markdown

Authorisation

apiKeyoptionalHTTP
oauth2optionalOAuth 2.0

Query parameters

cursoroptionalstring
limitoptionalinteger
maximum: 9007199254740991, minimum: 1
updated_sinceoptionalstring
Only rows changed at or after this instant, sorted by updated_at then id. At most 90 days ago; a sync older than that has to start again from the beginning.

format: date-time, pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$

Header parameters

Quire-Versionoptionalstring
The dated API revision to serve this request at. Omitted, the request is served at the revision the credential was issued against. The response echoes the revision actually applied.

format: date

Returns

200

Success.

JSON

dataarray ofobjectrequired
16 properties
- idstringrequired
- chain_scopestringrequired
  The audit chain scope for this organisation.
- from_seqstringrequired
  First audit sequence covered, as a decimal string.
- to_seqstringrequired
  Last audit sequence covered, as a decimal string.
- entry_countstringrequired
  Number of audit entries covered, as a decimal string.
- head_link_hashstringrequired
  Hex-encoded hash at the checkpoint boundary.
- prev_head_hashstringornullrequired
  2 variants
  One of the following:
  string
  null
- covers_fromstringrequired
  RFC 3339 timestamp in UTC.
- covers_tostringrequired
  RFC 3339 timestamp in UTC.
- created_atstringrequired
  RFC 3339 timestamp in UTC.
- updated_atstringrequired
  The same as created_at: a signed checkpoint never changes.
- key_idstringrequired
  Identifier of the public verification key; contains no key material.
- algorithmstringrequired
- signaturestringrequired
  Hex-encoded public signature for the checkpoint.
- cosignaturestringornullrequired
  2 variants
  One of the following:
  string
  null
- cosign_key_idstringornullrequired
  2 variants
  One of the following:
  string
  null
pageobjectrequired
3 properties
- next_cursorstring | nullrequired
- has_morebooleanrequired
- limitintegerrequired
  maximum: 9007199254740991, minimum: -9007199254740991

401

The credential is missing, malformed, expired or revoked.

JSON

typestringrequired
format: uri
titlestringrequired
statusintegerrequired
codestringrequired
categoryvalidationorauthenticationorauthorizationornot_foundorconflictorprecondition+4 morerequired
detailstringrequired
request_idstringrequired
docs_urlstringrequired
format: uri
errorsoptionalarray ofobject
3 properties
- pathstringrequired
  RFC 6901 JSON Pointer into the request body.
- codestringrequired
- detailstringrequired
retry_afteroptionalinteger | null

403

The credential lacks the scope this operation requires, or the acting subject lacks the capability.

JSON

typestringrequired
format: uri
titlestringrequired
statusintegerrequired
codestringrequired
categoryvalidationorauthenticationorauthorizationornot_foundorconflictorprecondition+4 morerequired
detailstringrequired
request_idstringrequired
docs_urlstringrequired
format: uri
errorsoptionalarray ofobject
3 properties
- pathstringrequired
  RFC 6901 JSON Pointer into the request body.
- codestringrequired
- detailstringrequired
retry_afteroptionalinteger | null

422

The request was understood and its content is not valid. errors names each field.

JSON

typestringrequired
format: uri
titlestringrequired
statusintegerrequired
codestringrequired
categoryvalidationorauthenticationorauthorizationornot_foundorconflictorprecondition+4 morerequired
detailstringrequired
request_idstringrequired
docs_urlstringrequired
format: uri
errorsoptionalarray ofobject
3 properties
- pathstringrequired
  RFC 6901 JSON Pointer into the request body.
- codestringrequired
- detailstringrequired
retry_afteroptionalinteger | null

429

A rate limit or a concurrency cap was reached. Retry-After says when to try again.

JSON

typestringrequired
format: uri
titlestringrequired
statusintegerrequired
codestringrequired
categoryvalidationorauthenticationorauthorizationornot_foundorconflictorprecondition+4 morerequired
detailstringrequired
request_idstringrequired
docs_urlstringrequired
format: uri
errorsoptionalarray ofobject
3 properties
- pathstringrequired
  RFC 6901 JSON Pointer into the request body.
- codestringrequired
- detailstringrequired
retry_afteroptionalinteger | null

500

Something failed at our end. Quote request_id when reporting it.

JSON

typestringrequired
format: uri
titlestringrequired
statusintegerrequired
codestringrequired
categoryvalidationorauthenticationorauthorizationornot_foundorconflictorprecondition+4 morerequired
detailstringrequired
request_idstringrequired
docs_urlstringrequired
format: uri
errorsoptionalarray ofobject
3 properties
- pathstringrequired
  RFC 6901 JSON Pointer into the request body.
- codestringrequired
- detailstringrequired
retry_afteroptionalinteger | null