From 4de219d882c7650253fc2d6d193670a7ddadff45 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 30 Sep 2025 09:58:06 -0400 Subject: [PATCH] PEP 807: document token minting request body Signed-off-by: William Woodruff --- peps/pep-0807.rst | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/peps/pep-0807.rst b/peps/pep-0807.rst index 3be96fce04a..1e54e30241c 100644 --- a/peps/pep-0807.rst +++ b/peps/pep-0807.rst @@ -249,7 +249,11 @@ proceed to mint an upload credential. To mint an upload credential, the uploading client performs an HTTP POST request to the *token minting endpoint* obtained during -`discovery `__. +`discovery `__. The payload of the +POST request **MUST** be a JSON object containing the following: + +- ``token``: a string containing the identity credential + obtained from the Trusted Publishing provider. On success, the server responds with a ``200 OK`` status code and a body containing a JSON object with the following fields: