POST /v1/gateway-bindings/complete
Gateway installer completes a binding with its one-time token (public, rate limited per source)
说明（契约原文）
The installer generated both private keys locally and verified the token's root CA fingerprint against /downloads/gateway-ca.pem first. Returns the client certificate (URI SAN spiffe://cdn-platform/gateway/<gateway_id>, 30 days), the node channel server certificate (90 days), CA bundles and the remote endpoints.
请求体
application/json · 必填：是
| 名称 | 类型 | 必填 | 说明 |
|---|---|---|---|
token | string | 是 | gwt1.<gateway_id>.<root CA SHA-256 first 16 bytes hex>.<secret> |
client_csr_der | string(byte) | 是 | Ed25519 CSR. |
server_csr_der | string(byte) | 是 | ECDSA P-256 CSR. |
enrollment_port | integer | 是 | — |
agent_port | integer | 是 | — |
version | string | 否 | — |
响应
| 状态码 | 说明 |
|---|---|
200 | Bound. 字段： |
401 | gateway_binding_token_invalid (unknown |
409 | gateway_remote_access_disabled |
422 | invalid_input (ports |
429 | rate_limited |
失败时怎么办
401检查凭据格式、是否过期或被轮换。409先回读资源当前状态；同一操作重试保持原 Idempotency-Key 和原请求内容。429被限速：等待后再试，降低并发。