Host Daisy Chain Authentication
Request Host Daisy Chain Authentication
This endpoint initiates host-side daisy-chain authentication using a Host Challenge Word (HCW). The client submits the ordered device chain along with the HCW and the corresponding Host Response Word (HRW). The service starts the authentication process and returns a transaction ID that can be used to track the status of the host daisy-chain authentication.
Method & Endpoint
Method: POST
Endpoint: /api/device/requestHostDaisyChainAuthentication
Headers: CF-Access-Client-ID and CF-Access-Client-Secret
Request Body
{
"requestSignedResponse": false,
"HCW": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"chain": [
{
"sequence": 1,
"TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef"
},
{
"sequence": 2,
"TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",
"data": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
},
{
"sequence": 3,
"TID": "800000001000000010000000000000014464b592da61f3fd5506fcb1f37f4bef",
"data": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
}
],
"HRW": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
}
✅ Successful Response — 201 Created
{
"transactionId": "123e4567-e89b-12d3-a456-426614174000"
}
❌ Error Responses
401 Unauthorized — Invalid authentication
{
"statusCode": 401,
"message": "Unauthorized"
}
403 Forbidden — Authorization Forbidden
{
"statusCode": 403,
"message": "Invalid request",
"error": "Forbidden"
}
Check Request Host Daisy Chain Authentication Status
This endpoint returns the current status of a host-initiated daisy-chain authentication request. By supplying the transaction ID in the request headers, the client can determine whether the authentication has succeeded, failed, or is still in progress.
Method & Endpoint
Method: GET
Endpoint: /api/device/checkRequestHostDaisyChainAuthenticationStatus
Headers: transactionId , CF-Access-Client-Id and CF-Access-Client-Secret
✅ Successful Response — 201 Created
{
"status": [
"AUTH_OK",
"AUTH_NOT_OK",
"PROCESSING"
]
}
❌ Error Responses
401 Unauthorized — Invalid authentication
{
"statusCode": 401,
"message": "Unauthorized"
}
403 Forbidden — Authorization Forbidden
{
"statusCode": 403,
"message": "Invalid request",
"error": "Forbidden"
}