- Purpose
- Deliver credentials to the holder's existing portal.
- Prerequisites
- An approved attempt
- Architecture
- Approval → issuance → certificate.available event → retrieval with a signed URL.
Configuration
| Download URL | Signed and short-lived; do not cache in a public CDN |
Implementation steps
- 01Subscribe to certificate.available
- 02Fetch metadata by certificate id
- 03Proxy the download through your own authorization check
Examples
Retrieve
bash
GET /api/v1/certificates/cert_01H8ZQA1F9Testing procedure
- Request before approval and assert 409 approval_pending
Troubleshooting
Expired download URL
Re-fetch metadata rather than storing the URL.