Referenca

Bezbednosni elementi

Bezbedni metapodaci sertifikata (JID, važenje, status) bez tajni. Za praćenje isteka i okruženja.

2 operacija

Lista bezbednosnih elemenata

get/v1/security-elements

Scope security-elements:read

Metapodaci sertifikata po obvezniku i prodajnom mestu: JID, okruženje, važenje, status isteka i preporuka zamene. Tajne se nikad ne vraćaju.

Beleške iz ugovora (OpenAPI, engleski)

Secret envelope references and plaintext values are never returned. Scoped to the caller's environment like every other tenant read.

Parametri

listSecurityElements: Parametri
Polje	Gde	Tip	Opis
`taxpayerId`opciono	query	uuid
`businessPremiseId`opciono	query	uuid

Primer

GET /v1/security-elements

curl -X GET "https://api.bokapos.rs/v1/security-elements?businessPremiseId=b7d4e2c1-9a3f-4c8e-8f21-6e5a0c9d3b22" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

Odgovori

listSecurityElements: Odgovori
200 OK	Tenant-scoped security elements

200 OK

{
  "items": [
    {
      "id": "e5f6a7b8-c9d0-4e1f-8a2b-3c4d5e6f7a80",
      "taxpayerId": "3f9c2a8e-6b1d-4e5a-9c47-1d2b8e6f0a11",
      "businessPremiseId": "b7d4e2c1-9a3f-4c8e-8f21-6e5a0c9d3b22",
      "environment": "sandbox",
      "jid": "JWX4K9PL",
      "certificateThumbprint": "A1B2C3D4E5F60718293A4B5C6D7E8F9012345678",
      "certificateSubject": "CN=JWX4K9PL, O=BOKA GROUP DOO, C=RS",
      "certificateIssuer": "CN=Sandbox ICA, O=Poreska uprava Republike Srbije, C=RS",
      "certificateSerialNumber": "3F9C2A8E6B1D",
      "certificateNotBefore": "2026-08-20T00:00:00Z",
      "certificateNotAfter": "2028-08-20T00:00:00Z",
      "certificateExpiryStatus": "current",
      "replacementRecommended": false,
      "status": "active",
      "createdAt": "2026-08-21T09:10:00.000Z",
      "updatedAt": "2026-08-21T09:12:00.000Z"
    }
  ]
}

Odgovor:

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

listSecurityElements: Odgovor
Polje	Tip	Opis
`items`obavezno	array<SecurityElement>
`id`obavezno	uuid
`taxpayerId`obavezno	uuid
`businessPremiseId`obavezno	uuid
`environment`obavezno	FiscalEnvironment	The Stripe-style fiscal environment. Machine credentials carry exactly one environment and may only use security elements of that environment; sandbox elements are BOKA-assigned and route to the TaxCore sandbox, production elements are the customer's own. Taxpayers and business premises carry the environment too: the BOKA sandbox taxpayer and premise created by a pool assignment are sandbox, everything a human registers is production, and setup registered by a machine credential belongs to that credential's environment. A premise inherits its taxpayer's environment and a security element can only be bound to a premise of its own. `sandboxproduction`Vrednosti
`jid`obavezno	string
`certificateThumbprint`obavezno	string
`certificateSubject`obavezno	string
`certificateIssuer`obavezno	string
`certificateSerialNumber`obavezno	string
`certificateNotBefore`obavezno	date-time
`certificateNotAfter`obavezno	date-time
`certificateExpiryStatus`obavezno	string	Server-evaluated public-certificate time status using the configured 30-day warning and 7-day critical windows by default. `not-yet-validcurrentwarningcriticalexpired`Vrednosti
`replacementRecommended`obavezno	boolean	True for a non-retired element whose public certificate is inside the warning window or expired; this is not proof of revocation or V-PFR status.
`status`obavezno	string	`pending-verificationactivesuspendedretired`Vrednosti
`createdAt`obavezno	date-time
`updatedAt`obavezno	date-time

Pročitaj bezbednosni element

get/v1/security-elements/{securityElementId}

Scope security-elements:read

Jedan element po identifikatoru, isti bezbedni skup polja.

Parametri

getSecurityElement: Parametri
Polje	Gde	Tip	Opis
`securityElementId`obavezno	path	uuid

Primer

GET /v1/security-elements/{securityElementId}

curl -X GET "https://api.bokapos.rs/v1/security-elements/e5f6a7b8-c9d0-4e1f-8a2b-3c4d5e6f7a80" \
  -H "Authorization: Bearer $BOKAPOS_TOKEN"

Odgovori

getSecurityElement: Odgovori
200 OK	Security element metadata`SecurityElement`
404 Not Found	Resource does not exist within the authenticated tenant scope`ErrorCode`

200 OK

{
  "id": "e5f6a7b8-c9d0-4e1f-8a2b-3c4d5e6f7a80",
  "taxpayerId": "3f9c2a8e-6b1d-4e5a-9c47-1d2b8e6f0a11",
  "businessPremiseId": "b7d4e2c1-9a3f-4c8e-8f21-6e5a0c9d3b22",
  "environment": "sandbox",
  "jid": "JWX4K9PL",
  "certificateThumbprint": "A1B2C3D4E5F60718293A4B5C6D7E8F9012345678",
  "certificateSubject": "CN=JWX4K9PL, O=BOKA GROUP DOO, C=RS",
  "certificateIssuer": "CN=Sandbox ICA, O=Poreska uprava Republike Srbije, C=RS",
  "certificateSerialNumber": "3F9C2A8E6B1D",
  "certificateNotBefore": "2026-08-20T00:00:00Z",
  "certificateNotAfter": "2028-08-20T00:00:00Z",
  "certificateExpiryStatus": "current",
  "replacementRecommended": false,
  "status": "active",
  "createdAt": "2026-08-21T09:10:00.000Z",
  "updatedAt": "2026-08-21T09:12:00.000Z"
}

Odgovor: SecurityElement

Opisi polja su preuzeti iz OpenAPI ugovora i na engleskom su; nazivi polja i vrednosti su isti u oba jezika.

getSecurityElement: Odgovor
Polje	Tip	Opis
`id`obavezno	uuid
`taxpayerId`obavezno	uuid
`businessPremiseId`obavezno	uuid
`environment`obavezno	FiscalEnvironment	The Stripe-style fiscal environment. Machine credentials carry exactly one environment and may only use security elements of that environment; sandbox elements are BOKA-assigned and route to the TaxCore sandbox, production elements are the customer's own. Taxpayers and business premises carry the environment too: the BOKA sandbox taxpayer and premise created by a pool assignment are sandbox, everything a human registers is production, and setup registered by a machine credential belongs to that credential's environment. A premise inherits its taxpayer's environment and a security element can only be bound to a premise of its own. `sandboxproduction`Vrednosti
`jid`obavezno	string
`certificateThumbprint`obavezno	string
`certificateSubject`obavezno	string
`certificateIssuer`obavezno	string
`certificateSerialNumber`obavezno	string
`certificateNotBefore`obavezno	date-time
`certificateNotAfter`obavezno	date-time
`certificateExpiryStatus`obavezno	string	Server-evaluated public-certificate time status using the configured 30-day warning and 7-day critical windows by default. `not-yet-validcurrentwarningcriticalexpired`Vrednosti
`replacementRecommended`obavezno	boolean	True for a non-retired element whose public certificate is inside the warning window or expired; this is not proof of revocation or V-PFR status.
`status`obavezno	string	`pending-verificationactivesuspendedretired`Vrednosti
`createdAt`obavezno	date-time
`updatedAt`obavezno	date-time