Get Challenge

This endpoint is called automatically by the SDK. You typically don’t need to call it directly.

Request

GET /api/v1/attestation/challenge

Header	Required	Description
`X-Bundle-ID`	Yes	App bundle identifier
`X-Team-ID`	Yes	Apple Developer Team ID

Parameter	Type	Description
`device_id`	`string`	Optional device identifier

{
  "challenge": "a1b2c3d4e5f6...",
  "expiresAt": "2025-03-10T12:05:00Z"
}

Field	Type	Description
`challenge`	`string`	Cryptographic challenge token
`expiresAt`	`string`	ISO 8601 expiration timestamp

Challenges expire after a short window. The SDK handles expiration and retries automatically.