Skip to main content

Verify node association

POST 
/v1/groups/:groupId/node-assoc-requests/:requestId/verify

Verifies the node association. Two authentication methods are supported, and exactly one must be used (they are mutually exclusive):

Method 1: challenge_response (traditional flow)

  • The node signs the SHA256 hash of the challenge using its private key.
  • Requires node_id to identify the node whose certificates will be used for verification.
  • Works for both Matter and non-Matter groups.
  • The node is immediately added to the group upon successful verification.
  • No NOC is generated - use nocsr_elements if NOC generation is needed.

Method 2: nocsr_elements (Matter attestation flow)

  • The device provides NOCSRElements TLV containing CSR, nonce, and optional vendor_reserved1.
  • Only valid for Matter-capable groups.
  • Requires attestation_challenge and attestation_signature.
  • If vendor_reserved1 contains a nodeID with registered certificates, signature is verified.
  • For pure Matter nodes (no vendor_reserved1 or no certificates), a random node_id is generated.
  • The node_id field is optional/ignored - extracted from vendor_reserved1 or auto-generated.
  • Returns the device NOC (Node Operational Certificate) and Matter Node ID.
  • The node is NOT added to the group yet - call /confirm after device installs the NOC.

For non-Matter groups:

  • Use challenge_response method only (nocsr_elements not supported).
  • The node is immediately added to the group upon successful verification.
  • Returns a success response.

For Matter-capable groups (two options):

  • Option A: Use challenge_response to add node to group without NOC generation.
  • Option B: Use nocsr_elements to get a NOC, then call /confirm to complete association.

Request​

Responses​

Verification successful. For non-Matter groups: Node added to group. For Matter groups with challenge_response: Node added to group (no NOC). For Matter groups with nocsr_elements: Returns NOC for device to install, then call /confirm.