# auth.md - Agent Registration and Authentication

This document outlines the authentication and programmatic registration protocols supported by ApplySarkariJob.com for autonomous AI agents, crawlers, and LLM services.

## Agent Audience & Access
ApplySarkariJob welcomes benign AI agents, search engines, and academic researchers seeking to discover, verify, and summarize Indian Government Recruitment notices (Sarkari Naukri).

## Registration Endpoints
- **Agent Self-Registration**: `https://sarkariresults.applysarkarijob.com/api/v1/agent/register`
- **Credential Claim**: `https://sarkariresults.applysarkarijob.com/api/v1/agent/claim`
- **OAuth Authorization Server**: `https://sarkariresults.applysarkarijob.com/.well-known/oauth-authorization-server`
- **Protected Resource Metadata**: `https://sarkariresults.applysarkarijob.com/.well-known/oauth-protected-resource`

## Supported Authentication Methods
1. **Anonymous / Client Identifier**: Agents can request an instant public access key by posting to the registration endpoint with basic agent metadata (`name`, `homepage`, `operator`).
2. **ID-JAG (Identity Assertion)**: Supported via `urn:ietf:params:oauth:token-type:id-jag` for cryptographically verified agent credentials.
3. **HTTP Signature / Web Bot Auth**: Outgoing agent requests can be validated using our public signature keys published at `/.well-known/http-message-signatures-directory`.

## Credential Usage
- **Header**: `Authorization: Bearer <token>`
- **API Key Header**: `X-API-Key: <key>`
- **Content Negotiation**: Send `Accept: text/markdown` on any public web page for clean, machine-parsable recruitment text.