Function request_challenge

src/orgkernel/pyapi/router.py:285–302

Generate and store a cryptographic challenge for an agent. The returned ChallengeRequest.nonce must be sent to the agent. The agent signs the nonce with its private key and calls /challenge/verify.

(
    agent_id: str,
    issued_by: str,
    db: Annotated[AsyncSession, Depends(get_db)],
    nonce: str | None = None,
    ttl_seconds: int = Query(default=300, ge=60, le=3600),
)

    description="Step 4 of PKI: verifier requests a cryptographic challenge for an agent.",
)
async def request_challenge(
    agent_id: str,
    issued_by: str,
    db: Annotated[AsyncSession, Depends(get_db)],
    nonce: str | None = None,
    ttl_seconds: int = Query(default=300, ge=60, le=3600),
) -> ChallengeRequest:
    """
    Generate and store a cryptographic challenge for an agent.

    The returned ChallengeRequest.nonce must be sent to the agent.
    The agent signs the nonce with its private key and calls /challenge/verify.
    """
    svc = AgentIdentityService(db)
    identity = await svc.get_by_id(agent_id)
    if identity is None:
        raise HTTPException(status_code=404, detail=f"AgentIdentity not found: {agent_id}")
    return await svc.request_challenge(agent_id, issued_by, nonce=nonce, ttl_seconds=ttl_seconds)


@_identity.post(