Verify audit log signature (deprecated path)

Recomputes the HMAC-SHA256 signature for a single audit log event and compares it (in constant time) against the stored signature to detect tampering.

GET /api/audit-logs/{id}/verify

Error

A valid request URL is required to generate request examples

200

{
  "valid": true,
  "computed": "<string>",
  "stored": "<string>"
}

This path is deprecated and will be removed in the following major release. Use /api/governance/audit-logs/{id}/verify instead.

This endpoint is available in Bifrost Enterprise only.

Authorizations

ManagementBearerAuthBasicAuth

Authorization · string · header · required

Management API authentication for /api/* endpoints. Use the Authorization header with Bearer <token>, where <token> is one of:

• a Bifrost management API key,
• a dashboard session token issued by POST /api/session/login,
• base64 of <admin-username>:<admin-password> (legacy equivalent of BasicAuth).

Virtual keys (sk-bf-*) and the x-api-key header are not accepted on management APIs - the sole exception is GET /api/governance/virtual-keys/quota, which is virtual-key-only.

Path Parameters

id · string · required

The unique identifier of the audit log event to verify.

Response

200

application/json

Successful response

The result of an audit log signature verification.

valid · boolean · required

Whether the stored signature matches the recomputed signature.

computed · string · required

The signature recomputed from the stored event fields.

stored · string · required

The signature persisted with the event.