# Retrieves the message that must be signed to edit private domain profile data

Retrieve the required message that must be signed by the domain owner to update a domain profile. A POST request must include the exact JSON body that will be used to make the update. The entire contents of the JSON body are included in the message hash, to ensure the signature cannot be used in combination with unauthorized modifications to the domain profile.

Endpoint: POST /user/{domain}/signature
Version: 1.0.0

## Path parameters:

  - `domain` (string, required)
    The domain name to query profile data

## Query parameters:

  - `expiry` (number)
    Expiry time represented by milliseconds since epoch
    Example: 1765522015090

## Request fields (application/json):

  - `displayName` (string)
    Name of domain owner
    Example: "John Doe"

  - `displayNamePublic` (boolean)

  - `description` (string)
    Short biography about the domain
    Example: "This is my domain"

  - `descriptionPublic` (boolean)

  - `location` (string)
    Location
    Example: "Metaverse"

  - `locationPublic` (boolean)

  - `imagePath` (string)
    URL to the domain profile picture
    Example: "https://ipfs.io/ipfs/path/to/pfp"

  - `imagePathPublic` (boolean)

  - `coverPath` (string)
    URL to the domain banner image
    Example: "https://ipfs.io/ipfs/path/to/banner"

  - `coverPathPublic` (boolean)

  - `web2Url` (string)
    Website URL
    Example: "https://www.mywebsite.com"

  - `publicDomainSellerEmail` (string)
    Public domain seller email visible to anyone
    Example: "seller@gmail.com"

  - `web2UrlPublic` (boolean)

  - `showDomainSuggestion` (boolean)

  - `showFeaturedCommunity` (boolean)

  - `showFeaturedPartner` (boolean)

  - `phoneNumber` (string)
    Phone number of domain owner
    Example: "555-555-5555"

  - `phoneNumberPublic` (boolean)

  - `privateEmail` (string)
    Personal email address to contact the domain owner
    Example: "me@email.com"

  - `messagingDisabled` (boolean)
    Indicates if messaging feature should be disabled

  - `thirdPartyMessagingEnabled` (boolean)
    Indicates if third party messaging should be enabled

  - `thirdPartyMessagingConfigType` (string)
    Type of third part messaging
    Example: "Skiff"

  - `data` (object)

  - `data.image` (object)

  - `data.image.base64` (string)
    Base64 encoded string of the image data
    Example: "aGVsbG8gd29ybGQK"

  - `data.image.type` (string)
    MIME type of the base64 encoded file (image/jpeg or image/png)
    Example: "image/png"

  - `data.cover` (object)

  - `socialAccounts` (object)

  - `socialAccounts.discord` (string)
    Name of the discord handle
    Example: "discorduser"

  - `socialAccounts.reddit` (string)
    Name of the reddit handle
    Example: "reddituser"

  - `socialAccounts.twitter` (string)
    Name of the twitter handle
    Example: "twitteruser"

  - `socialAccounts.telegram` (string)
    Name of the telegram handle
    Example: "telegramuser"

  - `socialAccounts.youtube` (string)
    Name of the youtube handle
    Example: "youtubeuser"

## Response 200 fields (application/json):

  - `message` (string)
    The message that must be signed by the domain owner's private key to authenticate a subsequent request

  - `headers` (object)

  - `headers.x-auth-domain` (string)
    The domain that must be included in subsequent request header
    Example: "mydomain.tld"

  - `headers.x-auth-expires` (string)
    Expiration time that must be included in subsequent request header
    Example: "Milliseconds since epoch"


## Response 404 fields