Skip to content

Audit record integrity

Generated from core/api/router.go. Edit the router, not this file.

MethodPathWho can call it
GET/api/v1/audit/verifyAdmin

GET /api/v1/audit/verify

Who can call itAdmin
HandlerauditHandler.Verify
Display tokenRefused — not a viewer-safe GET

Whether the audit log has been altered, as distinct from what it says. Admin only: the people who could tamper with it are the ones this answer would implicate, and telling them whether the check passes is telling them whether a rewrite worked.

Parameters

NameInDefault
fromquery
limitquery

Responses

StatusBody
200A AuditChainReport object
400{ "error": … }
· from must be a sequence number of 1 or greater
500{ "error": … }
Example request
bash
curl -X GET 'https://certpilot.example.com/api/v1/audit/verify' \
  -H 'Authorization: Bearer <token>'