Version: 1.0.0

RSMG Engage — User Engagement Platform API

Multi-tenant engagement API for publishers: comments, discussions, reactions, moderation, real-time streaming (SSE), and webhooks.

Authentication

HTTP: Bearer Auth

Admin panel JWT (issued by POST /api/v1/admin/auth/login)

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT

API Key: apiKey

Tenant API key for authentication

Security Scheme Type:	apiKey
Header parameter name:	X-API-Key

API Key: identityAssertion

base64url identity assertion vouching for the acting end-user (signed by the publisher backend; see the identity-signing guide).

Security Scheme Type:	apiKey
Header parameter name:	X-RSMG-Engage-Identity

API Key: identitySignature

HMAC-SHA256 signature over the assertion: t=<unix>,v1=<hex>,kid=<8hex>. Required whenever X-RSMG-Engage-Identity is sent. An OIDC ID token in Authorization: Bearer is the alternative proof (ADR-0054).

Security Scheme Type:	apiKey
Header parameter name:	X-RSMG-Engage-Identity-Signature