@opentdf/sdk 0.4.0-beta.19 → 0.4.0-beta.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/src/auth/oidc-clientcredentials-provider.js +4 -2
- package/dist/cjs/src/auth/oidc-externaljwt-provider.js +5 -3
- package/dist/cjs/src/auth/oidc-refreshtoken-provider.js +5 -3
- package/dist/cjs/src/auth/oidc.js +9 -8
- package/dist/cjs/src/auth/providers.js +7 -1
- package/dist/cjs/src/opentdf.js +3 -1
- package/dist/cjs/src/platform/entityresolution/entity_resolution_pb.js +1 -1
- package/dist/cjs/src/platform/policy/attributes/attributes_pb.js +2 -2
- package/dist/cjs/src/platform/policy/kasregistry/key_access_server_registry_pb.js +36 -5
- package/dist/cjs/src/platform/policy/namespaces/namespaces_pb.js +2 -3
- package/dist/cjs/src/platform/policy/objects_pb.js +85 -42
- package/dist/cjs/src/platform/policy/registeredresources/registered_resources_pb.js +20 -15
- package/dist/cjs/src/platform/policy/resourcemapping/resource_mapping_pb.js +2 -3
- package/dist/cjs/src/platform/policy/subjectmapping/subject_mapping_pb.js +2 -3
- package/dist/cjs/src/platform/policy/unsafe/unsafe_pb.js +2 -4
- package/dist/cjs/src/policy/granter.js +75 -48
- package/dist/cjs/tdf3/src/client/builders.js +1 -1
- package/dist/cjs/tdf3/src/client/index.js +199 -53
- package/dist/cjs/tdf3/src/client/validation.js +3 -3
- package/dist/cjs/tdf3/src/tdf.js +8 -2
- package/dist/types/src/auth/oidc-clientcredentials-provider.d.ts +1 -1
- package/dist/types/src/auth/oidc-clientcredentials-provider.d.ts.map +1 -1
- package/dist/types/src/auth/oidc-externaljwt-provider.d.ts +1 -1
- package/dist/types/src/auth/oidc-externaljwt-provider.d.ts.map +1 -1
- package/dist/types/src/auth/oidc-refreshtoken-provider.d.ts +1 -1
- package/dist/types/src/auth/oidc-refreshtoken-provider.d.ts.map +1 -1
- package/dist/types/src/auth/oidc.d.ts +4 -0
- package/dist/types/src/auth/oidc.d.ts.map +1 -1
- package/dist/types/src/auth/providers.d.ts.map +1 -1
- package/dist/types/src/opentdf.d.ts.map +1 -1
- package/dist/types/src/platform/entityresolution/entity_resolution_pb.d.ts +4 -0
- package/dist/types/src/platform/entityresolution/entity_resolution_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/attributes/attributes_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/kasregistry/key_access_server_registry_pb.d.ts +181 -24
- package/dist/types/src/platform/policy/kasregistry/key_access_server_registry_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/namespaces/namespaces_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/objects_pb.d.ts +195 -27
- package/dist/types/src/platform/policy/objects_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/registeredresources/registered_resources_pb.d.ts +67 -0
- package/dist/types/src/platform/policy/registeredresources/registered_resources_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/resourcemapping/resource_mapping_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/subjectmapping/subject_mapping_pb.d.ts.map +1 -1
- package/dist/types/src/platform/policy/unsafe/unsafe_pb.d.ts +0 -1
- package/dist/types/src/platform/policy/unsafe/unsafe_pb.d.ts.map +1 -1
- package/dist/types/src/policy/granter.d.ts +11 -6
- package/dist/types/src/policy/granter.d.ts.map +1 -1
- package/dist/types/tdf3/src/client/builders.d.ts +1 -0
- package/dist/types/tdf3/src/client/builders.d.ts.map +1 -1
- package/dist/types/tdf3/src/client/index.d.ts +11 -3
- package/dist/types/tdf3/src/client/index.d.ts.map +1 -1
- package/dist/types/tdf3/src/client/validation.d.ts +3 -3
- package/dist/types/tdf3/src/client/validation.d.ts.map +1 -1
- package/dist/types/tdf3/src/tdf.d.ts +1 -1
- package/dist/types/tdf3/src/tdf.d.ts.map +1 -1
- package/dist/web/src/auth/oidc-clientcredentials-provider.js +4 -2
- package/dist/web/src/auth/oidc-externaljwt-provider.js +5 -3
- package/dist/web/src/auth/oidc-refreshtoken-provider.js +5 -3
- package/dist/web/src/auth/oidc.js +9 -8
- package/dist/web/src/auth/providers.js +7 -1
- package/dist/web/src/opentdf.js +3 -1
- package/dist/web/src/platform/entityresolution/entity_resolution_pb.js +1 -1
- package/dist/web/src/platform/policy/attributes/attributes_pb.js +2 -2
- package/dist/web/src/platform/policy/kasregistry/key_access_server_registry_pb.js +34 -4
- package/dist/web/src/platform/policy/namespaces/namespaces_pb.js +2 -3
- package/dist/web/src/platform/policy/objects_pb.js +84 -41
- package/dist/web/src/platform/policy/registeredresources/registered_resources_pb.js +19 -14
- package/dist/web/src/platform/policy/resourcemapping/resource_mapping_pb.js +2 -3
- package/dist/web/src/platform/policy/subjectmapping/subject_mapping_pb.js +2 -3
- package/dist/web/src/platform/policy/unsafe/unsafe_pb.js +2 -4
- package/dist/web/src/policy/granter.js +75 -48
- package/dist/web/tdf3/src/client/builders.js +1 -1
- package/dist/web/tdf3/src/client/index.js +201 -56
- package/dist/web/tdf3/src/client/validation.js +3 -3
- package/dist/web/tdf3/src/tdf.js +8 -2
- package/package.json +1 -1
- package/src/auth/oidc-clientcredentials-provider.ts +4 -0
- package/src/auth/oidc-externaljwt-provider.ts +5 -1
- package/src/auth/oidc-refreshtoken-provider.ts +5 -1
- package/src/auth/oidc.ts +12 -7
- package/src/auth/providers.ts +6 -0
- package/src/opentdf.ts +2 -1
- package/src/platform/entityresolution/entity_resolution_pb.ts +4 -0
- package/src/platform/policy/attributes/attributes_pb.ts +1 -1
- package/src/platform/policy/kasregistry/key_access_server_registry_pb.ts +206 -28
- package/src/platform/policy/namespaces/namespaces_pb.ts +1 -2
- package/src/platform/policy/objects_pb.ts +248 -53
- package/src/platform/policy/registeredresources/registered_resources_pb.ts +80 -13
- package/src/platform/policy/resourcemapping/resource_mapping_pb.ts +1 -2
- package/src/platform/policy/subjectmapping/subject_mapping_pb.ts +1 -2
- package/src/platform/policy/unsafe/unsafe_pb.ts +1 -3
- package/src/policy/granter.ts +82 -56
- package/tdf3/src/client/builders.ts +1 -0
- package/tdf3/src/client/index.ts +278 -73
- package/tdf3/src/client/validation.ts +2 -2
- package/tdf3/src/tdf.ts +8 -1
|
@@ -14,7 +14,67 @@ import type { Message } from "@bufbuild/protobuf";
|
|
|
14
14
|
* Describes the file policy/objects.proto.
|
|
15
15
|
*/
|
|
16
16
|
export const file_policy_objects: GenFile = /*@__PURE__*/
|
|
17
|
-
fileDesc("
|
|
17
|
+
fileDesc("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", [file_buf_validate_validate, file_common_common, file_google_protobuf_wrappers]);
|
|
18
|
+
|
|
19
|
+
/**
|
|
20
|
+
* @generated from message policy.SimpleKasPublicKey
|
|
21
|
+
*/
|
|
22
|
+
export type SimpleKasPublicKey = Message<"policy.SimpleKasPublicKey"> & {
|
|
23
|
+
/**
|
|
24
|
+
* @generated from field: policy.Algorithm algorithm = 1;
|
|
25
|
+
*/
|
|
26
|
+
algorithm: Algorithm;
|
|
27
|
+
|
|
28
|
+
/**
|
|
29
|
+
* @generated from field: string kid = 2;
|
|
30
|
+
*/
|
|
31
|
+
kid: string;
|
|
32
|
+
|
|
33
|
+
/**
|
|
34
|
+
* @generated from field: string pem = 3;
|
|
35
|
+
*/
|
|
36
|
+
pem: string;
|
|
37
|
+
};
|
|
38
|
+
|
|
39
|
+
/**
|
|
40
|
+
* Describes the message policy.SimpleKasPublicKey.
|
|
41
|
+
* Use `create(SimpleKasPublicKeySchema)` to create a new message.
|
|
42
|
+
*/
|
|
43
|
+
export const SimpleKasPublicKeySchema: GenMessage<SimpleKasPublicKey> = /*@__PURE__*/
|
|
44
|
+
messageDesc(file_policy_objects, 0);
|
|
45
|
+
|
|
46
|
+
/**
|
|
47
|
+
* @generated from message policy.SimpleKasKey
|
|
48
|
+
*/
|
|
49
|
+
export type SimpleKasKey = Message<"policy.SimpleKasKey"> & {
|
|
50
|
+
/**
|
|
51
|
+
* The URL of the Key Access Server
|
|
52
|
+
*
|
|
53
|
+
* @generated from field: string kas_uri = 1;
|
|
54
|
+
*/
|
|
55
|
+
kasUri: string;
|
|
56
|
+
|
|
57
|
+
/**
|
|
58
|
+
* The public key of the Key that belongs to the KAS
|
|
59
|
+
*
|
|
60
|
+
* @generated from field: policy.SimpleKasPublicKey public_key = 2;
|
|
61
|
+
*/
|
|
62
|
+
publicKey?: SimpleKasPublicKey;
|
|
63
|
+
|
|
64
|
+
/**
|
|
65
|
+
* The ID of the Key Access Server
|
|
66
|
+
*
|
|
67
|
+
* @generated from field: string kas_id = 3;
|
|
68
|
+
*/
|
|
69
|
+
kasId: string;
|
|
70
|
+
};
|
|
71
|
+
|
|
72
|
+
/**
|
|
73
|
+
* Describes the message policy.SimpleKasKey.
|
|
74
|
+
* Use `create(SimpleKasKeySchema)` to create a new message.
|
|
75
|
+
*/
|
|
76
|
+
export const SimpleKasKeySchema: GenMessage<SimpleKasKey> = /*@__PURE__*/
|
|
77
|
+
messageDesc(file_policy_objects, 1);
|
|
18
78
|
|
|
19
79
|
/**
|
|
20
80
|
* @generated from message policy.KeyProviderConfig
|
|
@@ -48,7 +108,7 @@ export type KeyProviderConfig = Message<"policy.KeyProviderConfig"> & {
|
|
|
48
108
|
* Use `create(KeyProviderConfigSchema)` to create a new message.
|
|
49
109
|
*/
|
|
50
110
|
export const KeyProviderConfigSchema: GenMessage<KeyProviderConfig> = /*@__PURE__*/
|
|
51
|
-
messageDesc(file_policy_objects,
|
|
111
|
+
messageDesc(file_policy_objects, 2);
|
|
52
112
|
|
|
53
113
|
/**
|
|
54
114
|
* @generated from message policy.Namespace
|
|
@@ -96,9 +156,9 @@ export type Namespace = Message<"policy.Namespace"> & {
|
|
|
96
156
|
/**
|
|
97
157
|
* Keys for the namespace
|
|
98
158
|
*
|
|
99
|
-
* @generated from field: repeated policy.
|
|
159
|
+
* @generated from field: repeated policy.SimpleKasKey kas_keys = 7;
|
|
100
160
|
*/
|
|
101
|
-
kasKeys:
|
|
161
|
+
kasKeys: SimpleKasKey[];
|
|
102
162
|
};
|
|
103
163
|
|
|
104
164
|
/**
|
|
@@ -106,7 +166,7 @@ export type Namespace = Message<"policy.Namespace"> & {
|
|
|
106
166
|
* Use `create(NamespaceSchema)` to create a new message.
|
|
107
167
|
*/
|
|
108
168
|
export const NamespaceSchema: GenMessage<Namespace> = /*@__PURE__*/
|
|
109
|
-
messageDesc(file_policy_objects,
|
|
169
|
+
messageDesc(file_policy_objects, 3);
|
|
110
170
|
|
|
111
171
|
/**
|
|
112
172
|
* @generated from message policy.Attribute
|
|
@@ -165,9 +225,9 @@ export type Attribute = Message<"policy.Attribute"> & {
|
|
|
165
225
|
/**
|
|
166
226
|
* Keys associated with the attribute
|
|
167
227
|
*
|
|
168
|
-
* @generated from field: repeated policy.
|
|
228
|
+
* @generated from field: repeated policy.SimpleKasKey kas_keys = 9;
|
|
169
229
|
*/
|
|
170
|
-
kasKeys:
|
|
230
|
+
kasKeys: SimpleKasKey[];
|
|
171
231
|
|
|
172
232
|
/**
|
|
173
233
|
* Common metadata
|
|
@@ -182,7 +242,7 @@ export type Attribute = Message<"policy.Attribute"> & {
|
|
|
182
242
|
* Use `create(AttributeSchema)` to create a new message.
|
|
183
243
|
*/
|
|
184
244
|
export const AttributeSchema: GenMessage<Attribute> = /*@__PURE__*/
|
|
185
|
-
messageDesc(file_policy_objects,
|
|
245
|
+
messageDesc(file_policy_objects, 4);
|
|
186
246
|
|
|
187
247
|
/**
|
|
188
248
|
* @generated from message policy.Value
|
|
@@ -233,9 +293,14 @@ export type Value = Message<"policy.Value"> & {
|
|
|
233
293
|
subjectMappings: SubjectMapping[];
|
|
234
294
|
|
|
235
295
|
/**
|
|
236
|
-
* @generated from field: repeated policy.
|
|
296
|
+
* @generated from field: repeated policy.SimpleKasKey kas_keys = 9;
|
|
297
|
+
*/
|
|
298
|
+
kasKeys: SimpleKasKey[];
|
|
299
|
+
|
|
300
|
+
/**
|
|
301
|
+
* @generated from field: repeated policy.ResourceMapping resource_mappings = 10;
|
|
237
302
|
*/
|
|
238
|
-
|
|
303
|
+
resourceMappings: ResourceMapping[];
|
|
239
304
|
|
|
240
305
|
/**
|
|
241
306
|
* Common metadata
|
|
@@ -250,7 +315,7 @@ export type Value = Message<"policy.Value"> & {
|
|
|
250
315
|
* Use `create(ValueSchema)` to create a new message.
|
|
251
316
|
*/
|
|
252
317
|
export const ValueSchema: GenMessage<Value> = /*@__PURE__*/
|
|
253
|
-
messageDesc(file_policy_objects,
|
|
318
|
+
messageDesc(file_policy_objects, 5);
|
|
254
319
|
|
|
255
320
|
/**
|
|
256
321
|
* An action an entity can take
|
|
@@ -304,7 +369,7 @@ export type Action = Message<"policy.Action"> & {
|
|
|
304
369
|
* Use `create(ActionSchema)` to create a new message.
|
|
305
370
|
*/
|
|
306
371
|
export const ActionSchema: GenMessage<Action> = /*@__PURE__*/
|
|
307
|
-
messageDesc(file_policy_objects,
|
|
372
|
+
messageDesc(file_policy_objects, 6);
|
|
308
373
|
|
|
309
374
|
/**
|
|
310
375
|
* @generated from enum policy.Action.StandardAction
|
|
@@ -336,7 +401,7 @@ export enum Action_StandardAction {
|
|
|
336
401
|
* Describes the enum policy.Action.StandardAction.
|
|
337
402
|
*/
|
|
338
403
|
export const Action_StandardActionSchema: GenEnum<Action_StandardAction> = /*@__PURE__*/
|
|
339
|
-
enumDesc(file_policy_objects,
|
|
404
|
+
enumDesc(file_policy_objects, 6, 0);
|
|
340
405
|
|
|
341
406
|
/**
|
|
342
407
|
*
|
|
@@ -383,7 +448,7 @@ export type SubjectMapping = Message<"policy.SubjectMapping"> & {
|
|
|
383
448
|
* Use `create(SubjectMappingSchema)` to create a new message.
|
|
384
449
|
*/
|
|
385
450
|
export const SubjectMappingSchema: GenMessage<SubjectMapping> = /*@__PURE__*/
|
|
386
|
-
messageDesc(file_policy_objects,
|
|
451
|
+
messageDesc(file_policy_objects, 7);
|
|
387
452
|
|
|
388
453
|
/**
|
|
389
454
|
* *
|
|
@@ -423,7 +488,7 @@ export type Condition = Message<"policy.Condition"> & {
|
|
|
423
488
|
* Use `create(ConditionSchema)` to create a new message.
|
|
424
489
|
*/
|
|
425
490
|
export const ConditionSchema: GenMessage<Condition> = /*@__PURE__*/
|
|
426
|
-
messageDesc(file_policy_objects,
|
|
491
|
+
messageDesc(file_policy_objects, 8);
|
|
427
492
|
|
|
428
493
|
/**
|
|
429
494
|
* A collection of Conditions evaluated by the boolean_operator provided
|
|
@@ -449,7 +514,7 @@ export type ConditionGroup = Message<"policy.ConditionGroup"> & {
|
|
|
449
514
|
* Use `create(ConditionGroupSchema)` to create a new message.
|
|
450
515
|
*/
|
|
451
516
|
export const ConditionGroupSchema: GenMessage<ConditionGroup> = /*@__PURE__*/
|
|
452
|
-
messageDesc(file_policy_objects,
|
|
517
|
+
messageDesc(file_policy_objects, 9);
|
|
453
518
|
|
|
454
519
|
/**
|
|
455
520
|
* A collection of Condition Groups
|
|
@@ -470,7 +535,7 @@ export type SubjectSet = Message<"policy.SubjectSet"> & {
|
|
|
470
535
|
* Use `create(SubjectSetSchema)` to create a new message.
|
|
471
536
|
*/
|
|
472
537
|
export const SubjectSetSchema: GenMessage<SubjectSet> = /*@__PURE__*/
|
|
473
|
-
messageDesc(file_policy_objects,
|
|
538
|
+
messageDesc(file_policy_objects, 10);
|
|
474
539
|
|
|
475
540
|
/**
|
|
476
541
|
*
|
|
@@ -504,7 +569,7 @@ export type SubjectConditionSet = Message<"policy.SubjectConditionSet"> & {
|
|
|
504
569
|
* Use `create(SubjectConditionSetSchema)` to create a new message.
|
|
505
570
|
*/
|
|
506
571
|
export const SubjectConditionSetSchema: GenMessage<SubjectConditionSet> = /*@__PURE__*/
|
|
507
|
-
messageDesc(file_policy_objects,
|
|
572
|
+
messageDesc(file_policy_objects, 11);
|
|
508
573
|
|
|
509
574
|
/**
|
|
510
575
|
*
|
|
@@ -539,7 +604,7 @@ export type SubjectProperty = Message<"policy.SubjectProperty"> & {
|
|
|
539
604
|
* Use `create(SubjectPropertySchema)` to create a new message.
|
|
540
605
|
*/
|
|
541
606
|
export const SubjectPropertySchema: GenMessage<SubjectProperty> = /*@__PURE__*/
|
|
542
|
-
messageDesc(file_policy_objects,
|
|
607
|
+
messageDesc(file_policy_objects, 12);
|
|
543
608
|
|
|
544
609
|
/**
|
|
545
610
|
*
|
|
@@ -582,7 +647,7 @@ export type ResourceMappingGroup = Message<"policy.ResourceMappingGroup"> & {
|
|
|
582
647
|
* Use `create(ResourceMappingGroupSchema)` to create a new message.
|
|
583
648
|
*/
|
|
584
649
|
export const ResourceMappingGroupSchema: GenMessage<ResourceMappingGroup> = /*@__PURE__*/
|
|
585
|
-
messageDesc(file_policy_objects,
|
|
650
|
+
messageDesc(file_policy_objects, 13);
|
|
586
651
|
|
|
587
652
|
/**
|
|
588
653
|
*
|
|
@@ -623,7 +688,7 @@ export type ResourceMapping = Message<"policy.ResourceMapping"> & {
|
|
|
623
688
|
* Use `create(ResourceMappingSchema)` to create a new message.
|
|
624
689
|
*/
|
|
625
690
|
export const ResourceMappingSchema: GenMessage<ResourceMapping> = /*@__PURE__*/
|
|
626
|
-
messageDesc(file_policy_objects,
|
|
691
|
+
messageDesc(file_policy_objects, 14);
|
|
627
692
|
|
|
628
693
|
/**
|
|
629
694
|
*
|
|
@@ -661,9 +726,9 @@ export type KeyAccessServer = Message<"policy.KeyAccessServer"> & {
|
|
|
661
726
|
/**
|
|
662
727
|
* Kas keys associated with this KAS
|
|
663
728
|
*
|
|
664
|
-
* @generated from field: repeated policy.
|
|
729
|
+
* @generated from field: repeated policy.SimpleKasKey kas_keys = 5;
|
|
665
730
|
*/
|
|
666
|
-
kasKeys:
|
|
731
|
+
kasKeys: SimpleKasKey[];
|
|
667
732
|
|
|
668
733
|
/**
|
|
669
734
|
* Optional
|
|
@@ -686,7 +751,7 @@ export type KeyAccessServer = Message<"policy.KeyAccessServer"> & {
|
|
|
686
751
|
* Use `create(KeyAccessServerSchema)` to create a new message.
|
|
687
752
|
*/
|
|
688
753
|
export const KeyAccessServerSchema: GenMessage<KeyAccessServer> = /*@__PURE__*/
|
|
689
|
-
messageDesc(file_policy_objects,
|
|
754
|
+
messageDesc(file_policy_objects, 15);
|
|
690
755
|
|
|
691
756
|
/**
|
|
692
757
|
* @generated from message policy.Key
|
|
@@ -732,7 +797,7 @@ export type Key = Message<"policy.Key"> & {
|
|
|
732
797
|
* Use `create(KeySchema)` to create a new message.
|
|
733
798
|
*/
|
|
734
799
|
export const KeySchema: GenMessage<Key> = /*@__PURE__*/
|
|
735
|
-
messageDesc(file_policy_objects,
|
|
800
|
+
messageDesc(file_policy_objects, 16);
|
|
736
801
|
|
|
737
802
|
/**
|
|
738
803
|
* Deprecated
|
|
@@ -770,7 +835,7 @@ export type KasPublicKey = Message<"policy.KasPublicKey"> & {
|
|
|
770
835
|
* Use `create(KasPublicKeySchema)` to create a new message.
|
|
771
836
|
*/
|
|
772
837
|
export const KasPublicKeySchema: GenMessage<KasPublicKey> = /*@__PURE__*/
|
|
773
|
-
messageDesc(file_policy_objects,
|
|
838
|
+
messageDesc(file_policy_objects, 17);
|
|
774
839
|
|
|
775
840
|
/**
|
|
776
841
|
* Deprecated
|
|
@@ -790,7 +855,7 @@ export type KasPublicKeySet = Message<"policy.KasPublicKeySet"> & {
|
|
|
790
855
|
* Use `create(KasPublicKeySetSchema)` to create a new message.
|
|
791
856
|
*/
|
|
792
857
|
export const KasPublicKeySetSchema: GenMessage<KasPublicKeySet> = /*@__PURE__*/
|
|
793
|
-
messageDesc(file_policy_objects,
|
|
858
|
+
messageDesc(file_policy_objects, 18);
|
|
794
859
|
|
|
795
860
|
/**
|
|
796
861
|
* Deprecated
|
|
@@ -825,7 +890,7 @@ export type PublicKey = Message<"policy.PublicKey"> & {
|
|
|
825
890
|
* Use `create(PublicKeySchema)` to create a new message.
|
|
826
891
|
*/
|
|
827
892
|
export const PublicKeySchema: GenMessage<PublicKey> = /*@__PURE__*/
|
|
828
|
-
messageDesc(file_policy_objects,
|
|
893
|
+
messageDesc(file_policy_objects, 19);
|
|
829
894
|
|
|
830
895
|
/**
|
|
831
896
|
* @generated from message policy.RegisteredResource
|
|
@@ -859,7 +924,7 @@ export type RegisteredResource = Message<"policy.RegisteredResource"> & {
|
|
|
859
924
|
* Use `create(RegisteredResourceSchema)` to create a new message.
|
|
860
925
|
*/
|
|
861
926
|
export const RegisteredResourceSchema: GenMessage<RegisteredResource> = /*@__PURE__*/
|
|
862
|
-
messageDesc(file_policy_objects,
|
|
927
|
+
messageDesc(file_policy_objects, 20);
|
|
863
928
|
|
|
864
929
|
/**
|
|
865
930
|
* @generated from message policy.RegisteredResourceValue
|
|
@@ -880,6 +945,11 @@ export type RegisteredResourceValue = Message<"policy.RegisteredResourceValue">
|
|
|
880
945
|
*/
|
|
881
946
|
resource?: RegisteredResource;
|
|
882
947
|
|
|
948
|
+
/**
|
|
949
|
+
* @generated from field: repeated policy.RegisteredResourceValue.ActionAttributeValue action_attribute_values = 4;
|
|
950
|
+
*/
|
|
951
|
+
actionAttributeValues: RegisteredResourceValue_ActionAttributeValue[];
|
|
952
|
+
|
|
883
953
|
/**
|
|
884
954
|
* Common metadata
|
|
885
955
|
*
|
|
@@ -893,7 +963,41 @@ export type RegisteredResourceValue = Message<"policy.RegisteredResourceValue">
|
|
|
893
963
|
* Use `create(RegisteredResourceValueSchema)` to create a new message.
|
|
894
964
|
*/
|
|
895
965
|
export const RegisteredResourceValueSchema: GenMessage<RegisteredResourceValue> = /*@__PURE__*/
|
|
896
|
-
messageDesc(file_policy_objects,
|
|
966
|
+
messageDesc(file_policy_objects, 21);
|
|
967
|
+
|
|
968
|
+
/**
|
|
969
|
+
* @generated from message policy.RegisteredResourceValue.ActionAttributeValue
|
|
970
|
+
*/
|
|
971
|
+
export type RegisteredResourceValue_ActionAttributeValue = Message<"policy.RegisteredResourceValue.ActionAttributeValue"> & {
|
|
972
|
+
/**
|
|
973
|
+
* @generated from field: string id = 1;
|
|
974
|
+
*/
|
|
975
|
+
id: string;
|
|
976
|
+
|
|
977
|
+
/**
|
|
978
|
+
* @generated from field: policy.Action action = 2;
|
|
979
|
+
*/
|
|
980
|
+
action?: Action;
|
|
981
|
+
|
|
982
|
+
/**
|
|
983
|
+
* @generated from field: policy.Value attribute_value = 3;
|
|
984
|
+
*/
|
|
985
|
+
attributeValue?: Value;
|
|
986
|
+
|
|
987
|
+
/**
|
|
988
|
+
* Common metadata
|
|
989
|
+
*
|
|
990
|
+
* @generated from field: common.Metadata metadata = 100;
|
|
991
|
+
*/
|
|
992
|
+
metadata?: Metadata;
|
|
993
|
+
};
|
|
994
|
+
|
|
995
|
+
/**
|
|
996
|
+
* Describes the message policy.RegisteredResourceValue.ActionAttributeValue.
|
|
997
|
+
* Use `create(RegisteredResourceValue_ActionAttributeValueSchema)` to create a new message.
|
|
998
|
+
*/
|
|
999
|
+
export const RegisteredResourceValue_ActionAttributeValueSchema: GenMessage<RegisteredResourceValue_ActionAttributeValue> = /*@__PURE__*/
|
|
1000
|
+
messageDesc(file_policy_objects, 21, 0);
|
|
897
1001
|
|
|
898
1002
|
/**
|
|
899
1003
|
* @generated from message policy.KasKey
|
|
@@ -908,6 +1012,11 @@ export type KasKey = Message<"policy.KasKey"> & {
|
|
|
908
1012
|
* @generated from field: policy.AsymmetricKey key = 2;
|
|
909
1013
|
*/
|
|
910
1014
|
key?: AsymmetricKey;
|
|
1015
|
+
|
|
1016
|
+
/**
|
|
1017
|
+
* @generated from field: string kas_uri = 3;
|
|
1018
|
+
*/
|
|
1019
|
+
kasUri: string;
|
|
911
1020
|
};
|
|
912
1021
|
|
|
913
1022
|
/**
|
|
@@ -915,33 +1024,94 @@ export type KasKey = Message<"policy.KasKey"> & {
|
|
|
915
1024
|
* Use `create(KasKeySchema)` to create a new message.
|
|
916
1025
|
*/
|
|
917
1026
|
export const KasKeySchema: GenMessage<KasKey> = /*@__PURE__*/
|
|
918
|
-
messageDesc(file_policy_objects,
|
|
1027
|
+
messageDesc(file_policy_objects, 22);
|
|
1028
|
+
|
|
1029
|
+
/**
|
|
1030
|
+
* @generated from message policy.PublicKeyCtx
|
|
1031
|
+
*/
|
|
1032
|
+
export type PublicKeyCtx = Message<"policy.PublicKeyCtx"> & {
|
|
1033
|
+
/**
|
|
1034
|
+
* Required
|
|
1035
|
+
*
|
|
1036
|
+
* Base64 encoded public key in PEM format
|
|
1037
|
+
*
|
|
1038
|
+
* @generated from field: string pem = 1;
|
|
1039
|
+
*/
|
|
1040
|
+
pem: string;
|
|
1041
|
+
};
|
|
1042
|
+
|
|
1043
|
+
/**
|
|
1044
|
+
* Describes the message policy.PublicKeyCtx.
|
|
1045
|
+
* Use `create(PublicKeyCtxSchema)` to create a new message.
|
|
1046
|
+
*/
|
|
1047
|
+
export const PublicKeyCtxSchema: GenMessage<PublicKeyCtx> = /*@__PURE__*/
|
|
1048
|
+
messageDesc(file_policy_objects, 23);
|
|
1049
|
+
|
|
1050
|
+
/**
|
|
1051
|
+
* @generated from message policy.PrivateKeyCtx
|
|
1052
|
+
*/
|
|
1053
|
+
export type PrivateKeyCtx = Message<"policy.PrivateKeyCtx"> & {
|
|
1054
|
+
/**
|
|
1055
|
+
* Required
|
|
1056
|
+
*
|
|
1057
|
+
* Key ID for the symmetric key wrapping this key.
|
|
1058
|
+
*
|
|
1059
|
+
* @generated from field: string key_id = 1;
|
|
1060
|
+
*/
|
|
1061
|
+
keyId: string;
|
|
1062
|
+
|
|
1063
|
+
/**
|
|
1064
|
+
* Optional
|
|
1065
|
+
*
|
|
1066
|
+
* Base64 encoded wrapped key. Conditionally required if key_mode is LOCAL. Should not be present if key_mode is REMOTE.
|
|
1067
|
+
*
|
|
1068
|
+
* @generated from field: string wrapped_key = 2;
|
|
1069
|
+
*/
|
|
1070
|
+
wrappedKey: string;
|
|
1071
|
+
};
|
|
1072
|
+
|
|
1073
|
+
/**
|
|
1074
|
+
* Describes the message policy.PrivateKeyCtx.
|
|
1075
|
+
* Use `create(PrivateKeyCtxSchema)` to create a new message.
|
|
1076
|
+
*/
|
|
1077
|
+
export const PrivateKeyCtxSchema: GenMessage<PrivateKeyCtx> = /*@__PURE__*/
|
|
1078
|
+
messageDesc(file_policy_objects, 24);
|
|
919
1079
|
|
|
920
1080
|
/**
|
|
921
1081
|
* @generated from message policy.AsymmetricKey
|
|
922
1082
|
*/
|
|
923
1083
|
export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
|
|
924
1084
|
/**
|
|
1085
|
+
* Required
|
|
1086
|
+
*
|
|
925
1087
|
* @generated from field: string id = 1;
|
|
926
1088
|
*/
|
|
927
1089
|
id: string;
|
|
928
1090
|
|
|
929
1091
|
/**
|
|
1092
|
+
* Required
|
|
1093
|
+
*
|
|
930
1094
|
* @generated from field: string key_id = 2;
|
|
931
1095
|
*/
|
|
932
1096
|
keyId: string;
|
|
933
1097
|
|
|
934
1098
|
/**
|
|
1099
|
+
* Required
|
|
1100
|
+
*
|
|
935
1101
|
* @generated from field: policy.Algorithm key_algorithm = 3;
|
|
936
1102
|
*/
|
|
937
1103
|
keyAlgorithm: Algorithm;
|
|
938
1104
|
|
|
939
1105
|
/**
|
|
1106
|
+
* Required
|
|
1107
|
+
*
|
|
940
1108
|
* @generated from field: policy.KeyStatus key_status = 4;
|
|
941
1109
|
*/
|
|
942
1110
|
keyStatus: KeyStatus;
|
|
943
1111
|
|
|
944
1112
|
/**
|
|
1113
|
+
* Required
|
|
1114
|
+
*
|
|
945
1115
|
* Specifies how the key is managed (local or remote)
|
|
946
1116
|
*
|
|
947
1117
|
* @generated from field: policy.KeyMode key_mode = 5;
|
|
@@ -949,20 +1119,26 @@ export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
|
|
|
949
1119
|
keyMode: KeyMode;
|
|
950
1120
|
|
|
951
1121
|
/**
|
|
1122
|
+
* Required
|
|
1123
|
+
*
|
|
952
1124
|
* Specific structure based on key provider implementation
|
|
953
1125
|
*
|
|
954
|
-
* @generated from field:
|
|
1126
|
+
* @generated from field: policy.PublicKeyCtx public_key_ctx = 6;
|
|
955
1127
|
*/
|
|
956
|
-
publicKeyCtx
|
|
1128
|
+
publicKeyCtx?: PublicKeyCtx;
|
|
957
1129
|
|
|
958
1130
|
/**
|
|
1131
|
+
* Optional
|
|
1132
|
+
*
|
|
959
1133
|
* Specific structure based on key provider implementation
|
|
960
1134
|
*
|
|
961
|
-
* @generated from field:
|
|
1135
|
+
* @generated from field: policy.PrivateKeyCtx private_key_ctx = 7;
|
|
962
1136
|
*/
|
|
963
|
-
privateKeyCtx
|
|
1137
|
+
privateKeyCtx?: PrivateKeyCtx;
|
|
964
1138
|
|
|
965
1139
|
/**
|
|
1140
|
+
* Optional
|
|
1141
|
+
*
|
|
966
1142
|
* Configuration for the key provider
|
|
967
1143
|
*
|
|
968
1144
|
* @generated from field: policy.KeyProviderConfig provider_config = 8;
|
|
@@ -982,7 +1158,7 @@ export type AsymmetricKey = Message<"policy.AsymmetricKey"> & {
|
|
|
982
1158
|
* Use `create(AsymmetricKeySchema)` to create a new message.
|
|
983
1159
|
*/
|
|
984
1160
|
export const AsymmetricKeySchema: GenMessage<AsymmetricKey> = /*@__PURE__*/
|
|
985
|
-
messageDesc(file_policy_objects,
|
|
1161
|
+
messageDesc(file_policy_objects, 25);
|
|
986
1162
|
|
|
987
1163
|
/**
|
|
988
1164
|
* @generated from message policy.SymmetricKey
|
|
@@ -1037,7 +1213,7 @@ export type SymmetricKey = Message<"policy.SymmetricKey"> & {
|
|
|
1037
1213
|
* Use `create(SymmetricKeySchema)` to create a new message.
|
|
1038
1214
|
*/
|
|
1039
1215
|
export const SymmetricKeySchema: GenMessage<SymmetricKey> = /*@__PURE__*/
|
|
1040
|
-
messageDesc(file_policy_objects,
|
|
1216
|
+
messageDesc(file_policy_objects, 26);
|
|
1041
1217
|
|
|
1042
1218
|
/**
|
|
1043
1219
|
* @generated from enum policy.AttributeRuleTypeEnum
|
|
@@ -1269,14 +1445,9 @@ export enum KeyStatus {
|
|
|
1269
1445
|
ACTIVE = 1,
|
|
1270
1446
|
|
|
1271
1447
|
/**
|
|
1272
|
-
* @generated from enum value:
|
|
1448
|
+
* @generated from enum value: KEY_STATUS_ROTATED = 2;
|
|
1273
1449
|
*/
|
|
1274
|
-
|
|
1275
|
-
|
|
1276
|
-
/**
|
|
1277
|
-
* @generated from enum value: KEY_STATUS_COMPROMISED = 3;
|
|
1278
|
-
*/
|
|
1279
|
-
COMPROMISED = 3,
|
|
1450
|
+
ROTATED = 2,
|
|
1280
1451
|
}
|
|
1281
1452
|
|
|
1282
1453
|
/**
|
|
@@ -1286,29 +1457,53 @@ export const KeyStatusSchema: GenEnum<KeyStatus> = /*@__PURE__*/
|
|
|
1286
1457
|
enumDesc(file_policy_objects, 6);
|
|
1287
1458
|
|
|
1288
1459
|
/**
|
|
1289
|
-
*
|
|
1290
|
-
* If the key mode is LOCAL, then the kas private key is stored in the database.
|
|
1291
|
-
* This could be encrypted or unencrypted.
|
|
1292
|
-
* Remote means that the kas private key is stored in a remote key system like KMS or HSM
|
|
1293
|
-
* and all operations are done by the remote key system.
|
|
1460
|
+
* Describes the management and operational mode of a cryptographic key.
|
|
1294
1461
|
*
|
|
1295
1462
|
* @generated from enum policy.KeyMode
|
|
1296
1463
|
*/
|
|
1297
1464
|
export enum KeyMode {
|
|
1298
1465
|
/**
|
|
1466
|
+
* KEY_MODE_UNSPECIFIED: Default, unspecified key mode. Indicates an uninitialized or error state.
|
|
1467
|
+
*
|
|
1299
1468
|
* @generated from enum value: KEY_MODE_UNSPECIFIED = 0;
|
|
1300
1469
|
*/
|
|
1301
1470
|
UNSPECIFIED = 0,
|
|
1302
1471
|
|
|
1303
1472
|
/**
|
|
1304
|
-
*
|
|
1473
|
+
* KEY_MODE_CONFIG_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
|
|
1474
|
+
* sourced from local configuration. Unwrapping and all cryptographic operations are performed locally.
|
|
1475
|
+
*
|
|
1476
|
+
* @generated from enum value: KEY_MODE_CONFIG_ROOT_KEY = 1;
|
|
1477
|
+
*/
|
|
1478
|
+
CONFIG_ROOT_KEY = 1,
|
|
1479
|
+
|
|
1480
|
+
/**
|
|
1481
|
+
* KEY_MODE_PROVIDER_ROOT_KEY: Local key management where the private key is wrapped by a Key Encryption Key (KEK)
|
|
1482
|
+
* managed by an external provider (e.g., a Hardware Security Module or Cloud KMS).
|
|
1483
|
+
* Key unwrapping is delegated to the external provider; subsequent cryptographic operations
|
|
1484
|
+
* are performed locally using the unwrapped key.
|
|
1485
|
+
*
|
|
1486
|
+
* @generated from enum value: KEY_MODE_PROVIDER_ROOT_KEY = 2;
|
|
1305
1487
|
*/
|
|
1306
|
-
|
|
1488
|
+
PROVIDER_ROOT_KEY = 2,
|
|
1307
1489
|
|
|
1308
1490
|
/**
|
|
1309
|
-
*
|
|
1491
|
+
* KEY_MODE_REMOTE: Remote key management where the private key is stored in, and all cryptographic
|
|
1492
|
+
* operations are performed by, a remote Key Management Service (KMS) or HSM.
|
|
1493
|
+
* The private key material never leaves the secure boundary of the remote system.
|
|
1494
|
+
*
|
|
1495
|
+
* @generated from enum value: KEY_MODE_REMOTE = 3;
|
|
1496
|
+
*/
|
|
1497
|
+
REMOTE = 3,
|
|
1498
|
+
|
|
1499
|
+
/**
|
|
1500
|
+
* KEY_MODE_PUBLIC_KEY_ONLY: Public key only mode. Used when only a public key is available or required,
|
|
1501
|
+
* typically for wrapping operations (e.g., encrypting a Data Encryption Key (DEK) for an external KAS).
|
|
1502
|
+
* The corresponding private key is not managed or accessible by this system.
|
|
1503
|
+
*
|
|
1504
|
+
* @generated from enum value: KEY_MODE_PUBLIC_KEY_ONLY = 4;
|
|
1310
1505
|
*/
|
|
1311
|
-
|
|
1506
|
+
PUBLIC_KEY_ONLY = 4,
|
|
1312
1507
|
}
|
|
1313
1508
|
|
|
1314
1509
|
/**
|