Rotate a subscription signing secret
Rotates the subscription’s signing secret and returns the new once-shown secret plus the overlap window during which the previous secret still verifies. The console never stores the secret.
Partner route: the text above describes the tenant’s own route. Here the path names no party: the partner acts for the one originador its credential’s scope holds, which must be registered under the caller’s tenant; a credential whose scope holds more than one originador is refused 403 AUT-1022. An originador the bancarizador deactivated is refused 403 ORIGINADOR_DEACTIVATED until it is reactivated. The partner sees and manages only the subscriptions it created through this register’s routes: the party’s own subscriptions and any other partner’s answer 404, as a missing one does.
Autorizaciones
JWT bearer token issued by the identity provider.
Encabezados
Bearer token. A tenant route relays it to the streaming-hub as server-to-server auth.
Idempotency key, forwarded to the hub's idempotency middleware, which refuses this mutation without one.
Parámetros de ruta
Subscription id.

