Generate authentication challenge

GET

http://os-992244000006.local/api/v1/auth/challenge

Public endpoint that generates a challenge for three-party JWT authentication.

Security Notes:

Public endpoint, requires external rate limiting
Nonce is single-use and expires based on JWT exp_poh claim
Device stores up to 50 nonces with FIFO eviction

Flow:

Client calls this endpoint to get challenge
Client presents challenge to auth server with user credentials
Auth server issues JWT with nonce and expiration
Client submits JWT to /auth/login endpoint

Public endpoint that generates a challenge for three-party JWT authentication. **Security Notes:** - Public endpoint, requires external rate limiting - Nonce is single-use and expires based on JWT `exp_poh` claim - Device stores up to 50 nonces with FIFO eviction **Flow:** 1. Client calls this endpoint to get challenge 2. Client presents challenge to auth server with user credentials 3. Auth server issues JWT with nonce and expiration 4. Client submits JWT to `/auth/login` endpoint

Response

Challenge generated successfully

snstring

Device serial number (audience for JWT validation)

now_pohdouble

Current power-on hours (for POH-based expiration)

noncestringformat: "^[A-Za-z0-9_-]{22}$"

128-bit random nonce (base64url, 22 chars) for replay protection

fwstring

Firmware version (semver)

Errors

500

Internal Server Error

1	{
2	"sn": "991900123456",
3	"now_poh": 42.5,
4	"nonce": "a1b2c3d4e5f6g7h8i9j0k1",
5	"fw": "3.2.0"
6	}