do not let client choose salt

1 files changed, 15 insertions, 3 deletions

diff --git a/core/api-merchant.rst b/core/api-merchant.rst
index 7b77aba0..80314473 100644
--- a/core/api-merchant.rst
+++ b/core/api-merchant.rst
@@ -1355,12 +1355,12 @@ into any of the active bank accounts of an instance.
 
   **Request:**
 
-  The request must be an `AccountAddDetails`.
+  The request must have an `AccountAddDetails` body.
 
   **Response:**
 
-  :http:statuscode:`204 No content`:
-    Adding the account was successful.
+  :http:statuscode:`200 Ok`:
+    Adding the account was successful, we return the salt selected by the backend and the resulting wire hash in an `AccountAddResponse`.
   :http:statuscode:`404 Not found`:
     The merchant instance is unknown or it is not in our data.
   :http:statuscode:`409 Conflict`:
@@ -1419,6 +1419,18 @@ into any of the active bank accounts of an instance.
        password: string;
     };
 
+  .. ts:def:: AccountAddResponse
+
+    interface AccountAddResponse {
+
+      // Hash over the wire details (including over the salt).
+      h_wire: HashCode;
+
+      // Salt used to compute h_wire.
+      salt: HashCode;
+
+    }
+
 
 .. http:patch:: [/instances/$INSTANCE]/private/accounts/$H_WIRE