Rotating an authentication key
Use the following PATCH endpoint to rotate an authentication key.
PATCH /v1.0/agents/{id}
{
"op": ”key_rollover”
} Response (updated DID Document of the agent):
{
…
"verificationMethod": [
"id": "did:key:z6MkrksFdZoqfJnMeUZJ9rWo36Q9XKgD5axrruria5bTiQUQ#authVkey:
9116868d-f4cd-43d8-9306-dc7cc6ca2ec9:Ed25519VerificationKey2020",
"type": "Ed25519VerificationKey2020",
"controller": "did:web:diagency%3A9720:diagency:dids:v1.0:9116868d-f4cd-
43d8-9306-dc7cc6ca2ec9",
"deprecated": false,
"publicKeyMultibase": "z6MkrksFdZoqfJnMeUZJ9rWo36Q9XKgD5axrruria5bTiQUQ”
],
…
}
The old authentication key is replaced with a new key as shown in the response. Existing A2A communication remains unaffected as key rotation only affects the communication establishment process.