key_revoked

OLD=$(curl -s https://api.opentype.dev/v1/keys/key_d92a9043204d41c09c78fc813d54ef06 \
  -H "Authorization: Bearer $OPENTYPE_API_KEY")

curl https://api.opentype.dev/v1/keys \
  -H "Authorization: Bearer $OPENTYPE_API_KEY" \
  -H "Content-Type: application/json" \
  -d "$(echo "$OLD" | jq '{name, scopes}')"

const headers = {
  Authorization: `Bearer ${process.env.OPENTYPE_API_KEY}`,
  "Content-Type": "application/json",
};
const keyId = "key_d92a9043204d41c09c78fc813d54ef06";

const old = await fetch(`https://api.opentype.dev/v1/keys/${keyId}`, { headers }).then((r) => r.json());

const url = old.state === "revoked"
  ? "https://api.opentype.dev/v1/keys"                          // create a replacement
  : `https://api.opentype.dev/v1/keys/${keyId}/rotate`;         // rotate in place
const init: RequestInit = old.state === "revoked"
  ? { method: "POST", headers, body: JSON.stringify({ name: old.name, scopes: old.scopes }) }
  : { method: "POST", headers };

const res = await fetch(url, init);
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
// body.secret is shown only once. Store it now.
console.log(body.id, body.secret_prefix);

import os
import requests

headers = {"Authorization": f"Bearer {os.environ['OPENTYPE_API_KEY']}"}
key_id = "key_d92a9043204d41c09c78fc813d54ef06"

old = requests.get(f"https://api.opentype.dev/v1/keys/{key_id}", headers=headers, timeout=30).json()

if old["state"] == "revoked":
    # Create a replacement.
    resp = requests.post(
        "https://api.opentype.dev/v1/keys",
        headers={**headers, "Content-Type": "application/json"},
        json={"name": old["name"], "scopes": old["scopes"]},
        timeout=30,
    )
else:
    # Rotate in place.
    resp = requests.post(f"https://api.opentype.dev/v1/keys/{key_id}/rotate", headers=headers, timeout=30)

body = resp.json()
if not resp.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
# body["secret"] is shown only once. Store it now.
print(body["id"], body["secret_prefix"])