Encryption endpoints

Encryption keys reach your app in the callback fragment, not through an API call. The only app-facing encryption endpoint is the public-key lookup for e2ee:asymmetric apps. The SDK wraps it as lookupAppPublicKeyByHandle and lookupAppUserByPublicKey.

`GET /api/encryption/app-lookup`

Public. No credentials required.

string

required

Your app’s client ID. Results are limited to identities that authorized this app.

string

Look up an identity by handle. Case-insensitive.

string

Look up the identity that owns an app public key (base64 SPKI).

Provide exactly one of handle or public_key.

curl "https://api.aveid.net/api/encryption/app-lookup?client_id=YOUR_CLIENT_ID&handle=alice"

{
  "clientId": "YOUR_CLIENT_ID",
  "identityId": "identity-uuid",
  "handle": "alice",
  "displayName": "Alice Smith",
  "publicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE...",
  "encryptionMode": "asymmetric"
}

Errors:

400 both or neither of handle and public_key, or a malformed public key
404 app not found
404 identity not found, it has not signed in to this app, or it has no app public key yet
429 rate limited

A 404 for an existing user usually means they have not used your app with e2ee:asymmetric. Ask them to sign in to your app rather than creating keys on their behalf.

​GET /api/encryption/app-lookup

`GET /api/encryption/app-lookup`