Start here
Ask for a report's proof-of-work challenge
/v1/community/reports/challengeon https://api.auray.ai/v1The puzzle an anonymous report pays.
The puzzle an anonymous report pays. Find a nonce such that sha256("<salt>.<nonce>") begins with bits zero bits, then send the challenge string back unchanged with your nonce in the body of POST /v1/community/reports. One challenge is one report, and it expires after expires_in seconds. The Community hands these out itself, so reporting never waits on support being open; it is the same puzzle as POST /v1/support/challenge, at the difficulty our team sets for both. A report sent with a key solves none. A POST rather than a GET because a cached challenge is one salt handed to everybody.
#Authentication
No key needed, and none is read: it is the puzzle an anonymous report pays. Paced per address, and answered while support is closed.
#Example request
curl -X POST https://api.auray.ai/v1/community/reports/challengeconst res = await fetch("https://api.auray.ai/v1/community/reports/challenge", {
method: "POST",
});
console.log(await res.json());import requests
r = requests.post(
"https://api.auray.ai/v1/community/reports/challenge",
)
r.raise_for_status()
print(r.json())package main
import (
"fmt"
"io"
"net/http"
)
func main() {
req, err := http.NewRequest("POST", "https://api.auray.ai/v1/community/reports/challenge", nil)
if err != nil {
panic(err)
}
res, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer res.Body.Close()
out, _ := io.ReadAll(res.Body)
fmt.Println(res.Status, string(out))
}<?php
$ch = curl_init("https://api.auray.ai/v1/community/reports/challenge");
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_RETURNTRANSFER => true,
]);
$response = curl_exec($ch);
echo curl_getinfo($ch, CURLINFO_HTTP_CODE), " ", $response, PHP_EOL;require "net/http"
uri = URI("https://api.auray.ai/v1/community/reports/challenge")
req = Net::HTTP::Post.new(uri)
res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(req) }
puts res.code, res.bodyimport java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
public class Main {
public static void main(String[] args) throws Exception {
HttpRequest request = HttpRequest.newBuilder()
.uri(URI.create("https://api.auray.ai/v1/community/reports/challenge"))
.POST(HttpRequest.BodyPublishers.noBody())
.build();
HttpResponse<String> response = HttpClient.newHttpClient()
.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.statusCode() + " " + response.body());
}
}using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Post, "https://api.auray.ai/v1/community/reports/challenge");
using var response = await client.SendAsync(request);
Console.WriteLine($"{(int)response.StatusCode} {await response.Content.ReadAsStringAsync()}");#Responses
#200 OK
OK
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
object | string | yes | — | One of "challenge". |
challenge | string | yes | — | Signed. Send it back byte for byte; any change is refused by one comparison. |
salt | string | yes | — | A convenience copy of the field inside challenge; the server reads the signed one. |
bits | integer | yes | — | Leading zero bits required. Raised during an incident, so read it rather than assuming. |
expires_in | integer | yes | — | Seconds. |
algorithm | string | yes | — | One of "sha256-leading-zero-bits". |
request_id | string | no | — | Mirrored in the X-Request-Id header. |
Headers:
| Header | Description |
|---|---|
RateLimit-Limit | Burst capacity for the bucket that answered. |
RateLimit-Remaining | |
RateLimit-Reset | Seconds until refill. |
X-Request-Id |
#429 Too Many Requests
#503 Service Unavailable
#Status codes
| Status | Meaning |
|---|---|
200 | OK |
429 | Too Many Requests |
503 | Service Unavailable |
Every refusal names its code, and every code is explained at Errors.