GSB e-Services federation API

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

IDEMPOTENCY_IN_PROGRESS: the first request with this key is still running (Retry-After)

IDEMPOTENCY_KEY_REUSED: the key was used with another body

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

Signed answer (X-GSB-Fed-Signature): applied, or unchanged when the hub already mirrors exactly this version.

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION, FED_PATH_MISMATCH (the path's serviceId is not the manifest's), FED_HASH_MISMATCH (contentHash does not match the content)

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH, FED_MANIFEST_UNSIGNED / FED_MANIFEST_SIGNATURE (the manifest's own signature is missing, not the sender's or does not verify)

FED_SCOPE: the calling peer does not hold this operation's scope; FED_NOT_OWNER: the manifest names another owner node, or a ministry the node does not serve, or a service another node owns

IDEMPOTENCY_IN_PROGRESS: the first request with this key is still running (Retry-After); FED_STALE_VERSION: the hub mirrors a newer version; FED_VERSION_CONFLICT: the hub mirrors this version with other content; FED_SERVICE_ID_LOCAL: the hub hosts a service with this id itself

IDEMPOTENCY_KEY_REUSED: the key was used with another body

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

The cursor of the previous page (pull reconciliation).

1: include each item's signed manifest (manifestJws).

Comma-separated service ids (at most 100): just these entries, whatever their change time.

Items per page (1-500, default 100; 25 with full=1).

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature): the node made the case - 201 when made now, 200 with replayed when this hub submission had already made it (a repeat after a lost answer: one case).

Signed answer: the node made the case (FED-05).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope; the citizen assertion refused: FED_ASSURANCE_TOO_LOW, FED_PRINCIPAL_NOT_APPLICANT, FED_PRINCIPAL_INACTIVE

FED_SERVICE_UNKNOWN: not an active service of this node

IDEMPOTENCY_IN_PROGRESS: the first request with this key is still running (Retry-After); DUPLICATE_APPLICATION (EF-49), FED_SERVICE_CLOSED (intake window): the citizen must act

IDEMPOTENCY_KEY_REUSED: the key was used with another body; FED_VALIDATION / FED_FORM_CHANGED (the node's live form - errors per field; FED_FORM_CHANGED when the form changed since the hub's version), FED_FILE_REFUSED / FED_FILE_CHECKSUM (a file: type, size, antivirus, or not the bytes announced - errors with document:<label>)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

FED_FILE_UNAVAILABLE: the files could not be fetched from the hub's presigned URLs (the hub tries again)

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Why the helpdesk looks this case up (10-300 characters, e.g. the call reference). Audited on both sides.

The hub helpdesk user's id (pseudonymous to the node).

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION, FED_REASON_REQUIRED (reason or operator missing)

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

FED_NOT_FOUND: no case with that number on this node

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature); the body is defined by the lane that builds the operation.

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

IDEMPOTENCY_IN_PROGRESS: the first request with this key is still running (Retry-After)

IDEMPOTENCY_KEY_REUSED: the key was used with another body

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

DOCUMENT_NOT_FOUND: no such document, not released to the applicant, or not the asserted citizen's (one answer for all). 401 FED_ASSERTION_* when the citizen assertion is missing or refused.

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

PAYMENT_NOT_FOUND: no such invoice, or not the asserted citizen's (one answer for both). 401 FED_ASSERTION_* when the citizen assertion is missing or refused.

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

RECEIPT_NOT_FOUND: unknown reference, wrong signature, not paid - one answer for all (no oracle)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown or malformed code - one answer (PP-32)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

SHA-256 values in hex, comma-separated, at most 12: the whole file and each signed revision.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown or malformed code - one answer (PP-32)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown or malformed code - one answer (PP-32)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

The code's token, without the node key (22 characters of base64url for the facilities module).

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION, SESSION_INVALID

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold payments:point (only the hub does, HUB_SCOPES).

POINT_UNAVAILABLE: unknown, switched off or renewed code, a module that is off, a service the council does not offer - one answer for all.

The code's token, without the node key (22 characters of base64url for the facilities module).

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

The session's open ticket invoice, handed out again (reused: true).

A new ticket invoice.

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION, SESSION_INVALID

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold payments:point (only the hub does, HUB_SCOPES).

POINT_UNAVAILABLE

INVOICE_FAILED: the node's gateway could not raise the invoice.

The code's token, without the node key (22 characters of base64url for the facilities module).

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION, SESSION_INVALID

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold payments:point (only the hub does, HUB_SCOPES).

POINT_UNAVAILABLE, or NO_TICKET: this session has no ticket at the code.

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

The application: its case number on the node.

Return the events with a higher sequence number (default 0: all).

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

Signed answer (X-GSB-Fed-Signature); the body is defined by the lane that builds the operation.

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

IDEMPOTENCY_IN_PROGRESS: the first request with this key is still running (Retry-After)

IDEMPOTENCY_KEY_REUSED: the key was used with another body

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

JWKS

Discovery document

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown, malformed or not this node's - one answer

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

The source key of this node (not <key>@<node>: the hub strips its node key).

key (default), survey-record or diagram

The number searched for: letters, digits, spaces and / - . (at most 80)

A place on the map: longitude (WGS 84); with lat instead of by/q

Latitude (WGS 84)

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

SOURCE_NOT_FOUND: no public source of that key here

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

The source key of this node (not <key>@<node>: the hub strips its node key).

minLon,minLat,maxLon,maxLat (WGS 84)

The map zoom, 0-22

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

SOURCE_NOT_FOUND: no public source of that key here

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

The verification code (by=code) or the issued number or code (by=number), URL-encoded; at most 80 characters.

code (default) or number. The hub asks by number only for an authenticated partner client (permits:verify).

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown, malformed or not this node's - one answer

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

NO_MATCH: unknown, malformed or not this node's - one answer

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature): results for a search, entry for a key.

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

REGISTER_FORBIDDEN: this instance has not granted the register to the asking node.

NOT_FOUND: no such register here, or no record with the key.

Too many requests from this address (FED_RATE_LIMIT_PER_MIN), or more than VERIFY_FED_LOOKUP_PER_MIN look-ups from this peer in a minute (RATE_LIMITED)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

Not offered by this node (the hub reads it as "no accounts"). 401 FED_ASSERTION_* when the citizen assertion is missing or refused.

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Required on writes, and inside the signature (idk). A repeat with the same key returns the first answer (replayed: true, Idempotent-Replayed: true).

FED-04: the hub's short-lived (120 s) ES256 citizen assertion (token-exchange profile, pairwise subject, aud = the node). The node decides with its own PDP.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope; the citizen assertion refused: FED_ASSURANCE_TOO_LOW, FED_PRINCIPAL_NOT_APPLICANT, FED_PRINCIPAL_INACTIVE

ACCOUNT_NOT_FOUND: no such account, or not the asserted citizen's (one answer for both).

PRICE_MISMATCH (with the node's total), NOTHING_DUE, MODULE_DISABLED, NO_PAYMENT_SERVICE, FED_IDEMPOTENCY_IN_PROGRESS

IDEMPOTENCY_KEY_REUSED: the key was used with another body; FED_VALIDATION / FED_FORM_CHANGED (the node's live form - errors per field; FED_FORM_CHANGED when the form changed since the hub's version), FED_FILE_REFUSED / FED_FILE_CHECKSUM (a file: type, size, antivirus, or not the bytes announced - errors with document:<label>)

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

FED_FILE_UNAVAILABLE: the files could not be fetched from the hub's presigned URLs (the hub tries again)

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature).

FED_INVALID (unknown field, wrong type - errors lists the fields), FED_IDEMPOTENCY_KEY_REQUIRED, FED_HEADER_MISMATCH, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE: the calling peer does not hold this operation's scope

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance yet

Correlation id of the journey, written to both instances' audit trails; inside the signature (fid).

W3C trace context, carried end to end.

Signed answer (X-GSB-Fed-Signature) carrying the staff assertion (typ gsb-staff+jwt) for the asking node.

FED_INVALID (unknown field, wrong type), SSO_CODE_USED (already redeemed, by any node), SSO_CODE_EXPIRED, SSO_CODE_UNKNOWN, FED_VERSION

FED_UNSIGNED, FED_MALFORMED, FED_UNKNOWN_ISSUER, FED_UNKNOWN_KEY, FED_BAD_SIGNATURE, FED_WRONG_AUDIENCE, FED_EXPIRED, FED_NOT_YET_VALID, FED_WRONG_TARGET, FED_REPLAY, FED_MTLS_REQUIRED, FED_MTLS_MISMATCH

FED_SCOPE (the node's registry entry does not hold sso:redeem), SSO_CODE_WRONG_NODE (the code was made for another node; it is spent all the same), SSO_ACCOUNT_UNAVAILABLE (the hub account is no longer active staff, or was signed out everywhere since)

STAFF_SSO_OFF: staff sign-on is not switched on at the hub (STAFF_SSO); FED_UNKNOWN_ROUTE from an older hub

Too many requests from this address (FED_RATE_LIMIT_PER_MIN)

FED_NOT_IMPLEMENTED: part of contract v1, not offered by this instance