@sphereon/ssi-sdk.kms-rest-client 0.34.1-feature.IDK.11.48 → 0.34.1-feature.IDK.11.50
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.cjs +1056 -1185
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +1137 -17
- package/dist/index.d.ts +1137 -17
- package/dist/index.js +1049 -1179
- package/dist/index.js.map +1 -1
- package/package.json +3 -3
- package/plugin.schema.json +38 -157
- package/src/agent/KmsRestClient.ts +19 -20
- package/src/index.ts +1 -1
- package/src/models/AwsAssumeRoleCredentials.ts +49 -57
- package/src/models/AwsClientConfiguration.ts +29 -32
- package/src/models/AwsKmsSetting.ts +71 -85
- package/src/models/AwsStaticCredentials.ts +49 -57
- package/src/models/AwsWebIdentityTokenCredentials.ts +50 -58
- package/src/models/AzureClientSecretCredentialOpts.ts +45 -50
- package/src/models/AzureCredentialOpts.ts +24 -29
- package/src/models/AzureKeyVaultSetting.ts +60 -71
- package/src/models/CoseKey.ts +96 -104
- package/src/models/CoseKeyPair.ts +32 -38
- package/src/models/CoseKeyType.ts +18 -21
- package/src/models/CreateKeyProvider.ts +60 -74
- package/src/models/CreateRawSignature.ts +33 -39
- package/src/models/CreateRawSignatureResponse.ts +22 -25
- package/src/models/CreateSimpleSignature.ts +45 -59
- package/src/models/CryptoAlg.ts +18 -21
- package/src/models/Curve.ts +22 -25
- package/src/models/DigestAlg.ts +21 -24
- package/src/models/ErrorResponse.ts +39 -42
- package/src/models/GenerateKey.ts +51 -65
- package/src/models/GenerateKeyGlobal.ts +59 -73
- package/src/models/GenerateKeyResponse.ts +24 -30
- package/src/models/GetKeyResponse.ts +24 -30
- package/src/models/IdentifierMethod.ts +19 -22
- package/src/models/JoseKeyPair.ts +32 -38
- package/src/models/Jwk.ts +190 -207
- package/src/models/JwkKeyType.ts +18 -21
- package/src/models/JwkUse.ts +16 -19
- package/src/models/KeyEncoding.ts +16 -19
- package/src/models/KeyInfo.ts +103 -123
- package/src/models/KeyOperations.ts +22 -25
- package/src/models/KeyProvider.ts +33 -41
- package/src/models/KeyProviderResponse.ts +33 -41
- package/src/models/KeyProviderType.ts +17 -20
- package/src/models/KeyResolver.ts +44 -51
- package/src/models/KeyType.ts +17 -20
- package/src/models/KeyVisibility.ts +16 -19
- package/src/models/ListKeyProvidersResponse.ts +24 -30
- package/src/models/ListKeysResponse.ts +24 -30
- package/src/models/ListResolversResponse.ts +24 -30
- package/src/models/LookupMode.ts +17 -20
- package/src/models/ManagedKeyInfo.ts +106 -126
- package/src/models/ManagedKeyPair.ts +61 -70
- package/src/models/MaskGenFunction.ts +15 -18
- package/src/models/ProviderCapabilities.ts +65 -81
- package/src/models/ResolvePublicKey.ts +50 -61
- package/src/models/ResolvedKeyInfo.ts +104 -124
- package/src/models/Resolver.ts +44 -51
- package/src/models/SignInput.ts +42 -47
- package/src/models/SignOutput.ts +32 -38
- package/src/models/Signature.ts +51 -62
- package/src/models/SignatureAlgorithm.ts +26 -29
- package/src/models/StoreKey.ts +32 -38
- package/src/models/StoreKeyResponse.ts +24 -30
- package/src/models/UpdateKeyProvider.ts +49 -58
- package/src/models/VerifyRawSignature.ts +42 -48
- package/src/models/VerifyRawSignatureResponse.ts +22 -25
- package/src/models/VerifySimpleSignature.ts +35 -44
- package/src/models/index.ts +58 -58
- package/src/types/IKmsRestClient.ts +2 -2
package/dist/index.js
CHANGED
|
@@ -1,1138 +1,1011 @@
|
|
|
1
1
|
var __defProp = Object.defineProperty;
|
|
2
|
-
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
3
2
|
var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
|
|
4
|
-
var __commonJS = (cb, mod) => function __require() {
|
|
5
|
-
return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
|
|
6
|
-
};
|
|
7
3
|
|
|
8
4
|
// plugin.schema.json
|
|
9
|
-
var
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
5
|
+
var plugin_schema_default = {
|
|
6
|
+
IKmsRestClient: {
|
|
7
|
+
components: {
|
|
8
|
+
schemas: {
|
|
9
|
+
KmsCreateRawSignatureArgs: {
|
|
10
|
+
type: "object",
|
|
11
|
+
additionalProperties: false,
|
|
12
|
+
properties: {
|
|
13
|
+
keyInfo: {
|
|
14
|
+
$ref: "#/components/schemas/KeyInfo"
|
|
15
|
+
},
|
|
16
|
+
input: {
|
|
17
|
+
type: "string"
|
|
18
|
+
},
|
|
19
|
+
baseUrl: {
|
|
20
|
+
type: "string"
|
|
21
|
+
}
|
|
22
|
+
},
|
|
23
|
+
required: ["input", "keyInfo"]
|
|
24
|
+
},
|
|
25
|
+
KeyInfo: {
|
|
26
|
+
type: "object",
|
|
27
|
+
properties: {
|
|
28
|
+
kid: {
|
|
29
|
+
type: "string",
|
|
30
|
+
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
31
|
+
},
|
|
32
|
+
key: {
|
|
33
|
+
$ref: "#/components/schemas/Jwk"
|
|
34
|
+
},
|
|
35
|
+
signatureAlgorithm: {
|
|
36
|
+
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
37
|
+
},
|
|
38
|
+
keyVisibility: {
|
|
39
|
+
$ref: "#/components/schemas/KeyVisibility"
|
|
40
|
+
},
|
|
41
|
+
x5c: {
|
|
42
|
+
type: "array",
|
|
43
|
+
items: {
|
|
44
|
+
type: "string"
|
|
28
45
|
},
|
|
29
|
-
|
|
30
|
-
"input",
|
|
31
|
-
"keyInfo"
|
|
32
|
-
]
|
|
46
|
+
description: "X.509 certificate chain associated with the key."
|
|
33
47
|
},
|
|
34
|
-
|
|
48
|
+
alias: {
|
|
49
|
+
type: "string",
|
|
50
|
+
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
51
|
+
},
|
|
52
|
+
providerId: {
|
|
53
|
+
type: "string",
|
|
54
|
+
description: "The Key Management System (KMS) identifier associated with the key."
|
|
55
|
+
},
|
|
56
|
+
keyType: {
|
|
57
|
+
$ref: "#/components/schemas/KeyType"
|
|
58
|
+
},
|
|
59
|
+
keyEncoding: {
|
|
60
|
+
$ref: "#/components/schemas/KeyEncoding"
|
|
61
|
+
},
|
|
62
|
+
opts: {
|
|
35
63
|
type: "object",
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
type: "string",
|
|
39
|
-
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
40
|
-
},
|
|
41
|
-
key: {
|
|
42
|
-
$ref: "#/components/schemas/Jwk"
|
|
43
|
-
},
|
|
44
|
-
signatureAlgorithm: {
|
|
45
|
-
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
46
|
-
},
|
|
47
|
-
keyVisibility: {
|
|
48
|
-
$ref: "#/components/schemas/KeyVisibility"
|
|
49
|
-
},
|
|
50
|
-
x5c: {
|
|
51
|
-
type: "array",
|
|
52
|
-
items: {
|
|
53
|
-
type: "string"
|
|
54
|
-
},
|
|
55
|
-
description: "X.509 certificate chain associated with the key."
|
|
56
|
-
},
|
|
57
|
-
alias: {
|
|
58
|
-
type: "string",
|
|
59
|
-
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
60
|
-
},
|
|
61
|
-
providerId: {
|
|
62
|
-
type: "string",
|
|
63
|
-
description: "The Key Management System (KMS) identifier associated with the key."
|
|
64
|
-
},
|
|
65
|
-
keyType: {
|
|
66
|
-
$ref: "#/components/schemas/KeyType"
|
|
67
|
-
},
|
|
68
|
-
keyEncoding: {
|
|
69
|
-
$ref: "#/components/schemas/KeyEncoding"
|
|
70
|
-
},
|
|
71
|
-
opts: {
|
|
72
|
-
type: "object",
|
|
73
|
-
additionalProperties: {
|
|
74
|
-
type: "string"
|
|
75
|
-
},
|
|
76
|
-
description: "Additional configuration options as key-value pairs."
|
|
77
|
-
}
|
|
64
|
+
additionalProperties: {
|
|
65
|
+
type: "string"
|
|
78
66
|
},
|
|
79
|
-
|
|
80
|
-
|
|
67
|
+
description: "Additional configuration options as key-value pairs."
|
|
68
|
+
}
|
|
69
|
+
},
|
|
70
|
+
additionalProperties: false,
|
|
71
|
+
description: "Information about a cryptographic key, providing metadata and configuration details necessary for cryptographic operations."
|
|
72
|
+
},
|
|
73
|
+
Jwk: {
|
|
74
|
+
type: "object",
|
|
75
|
+
properties: {
|
|
76
|
+
kty: {
|
|
77
|
+
$ref: "#/components/schemas/JwkKeyType"
|
|
81
78
|
},
|
|
82
|
-
|
|
83
|
-
type: "
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
$ref: "#/components/schemas/JwkUse"
|
|
98
|
-
},
|
|
99
|
-
keyOps: {
|
|
100
|
-
type: "array",
|
|
101
|
-
items: {
|
|
102
|
-
$ref: "#/components/schemas/KeyOperations"
|
|
103
|
-
},
|
|
104
|
-
description: "The allowed cryptographic operations for the key."
|
|
105
|
-
},
|
|
106
|
-
crv: {
|
|
107
|
-
$ref: "#/components/schemas/Curve"
|
|
108
|
-
},
|
|
109
|
-
x: {
|
|
110
|
-
type: "string",
|
|
111
|
-
description: "The x coordinate for elliptic curve keys (base64url-encoded)."
|
|
112
|
-
},
|
|
113
|
-
y: {
|
|
114
|
-
type: "string",
|
|
115
|
-
description: "The y coordinate for elliptic curve keys (base64url-encoded)."
|
|
116
|
-
},
|
|
117
|
-
d: {
|
|
118
|
-
type: "string",
|
|
119
|
-
description: "The private key parameter (base64url-encoded)."
|
|
120
|
-
},
|
|
121
|
-
n: {
|
|
122
|
-
type: "string",
|
|
123
|
-
description: "The modulus value for RSA keys (base64url-encoded)."
|
|
124
|
-
},
|
|
125
|
-
e: {
|
|
126
|
-
type: "string",
|
|
127
|
-
description: "The public exponent for RSA keys (base64url-encoded)."
|
|
128
|
-
},
|
|
129
|
-
p: {
|
|
130
|
-
type: "string",
|
|
131
|
-
description: "The first prime factor for RSA private keys (base64url-encoded)."
|
|
132
|
-
},
|
|
133
|
-
q: {
|
|
134
|
-
type: "string",
|
|
135
|
-
description: "The second prime factor for RSA private keys (base64url-encoded)."
|
|
136
|
-
},
|
|
137
|
-
dp: {
|
|
138
|
-
type: "string",
|
|
139
|
-
description: "The first factor CRT exponent for RSA private keys (base64url-encoded)."
|
|
140
|
-
},
|
|
141
|
-
dq: {
|
|
142
|
-
type: "string",
|
|
143
|
-
description: "The second factor CRT exponent for RSA private keys (base64url-encoded)."
|
|
144
|
-
},
|
|
145
|
-
qi: {
|
|
146
|
-
type: "string",
|
|
147
|
-
description: "The first CRT coefficient for RSA private keys (base64url-encoded)."
|
|
148
|
-
},
|
|
149
|
-
k: {
|
|
150
|
-
type: "string",
|
|
151
|
-
description: "The symmetric key value (base64url-encoded)."
|
|
152
|
-
},
|
|
153
|
-
x5c: {
|
|
154
|
-
type: "array",
|
|
155
|
-
items: {
|
|
156
|
-
type: "string"
|
|
157
|
-
},
|
|
158
|
-
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
159
|
-
},
|
|
160
|
-
x5t: {
|
|
161
|
-
type: "string",
|
|
162
|
-
description: "X.509 certificate SHA-1 thumbprint (base64url-encoded)."
|
|
163
|
-
},
|
|
164
|
-
x5u: {
|
|
165
|
-
type: "string",
|
|
166
|
-
description: "URL pointing to X.509 certificate or certificate chain."
|
|
167
|
-
},
|
|
168
|
-
x5tS256: {
|
|
169
|
-
type: "string",
|
|
170
|
-
description: "X.509 certificate SHA-256 thumbprint (base64url-encoded)."
|
|
171
|
-
}
|
|
79
|
+
kid: {
|
|
80
|
+
type: "string",
|
|
81
|
+
description: "Key identifier used to uniquely identify the key."
|
|
82
|
+
},
|
|
83
|
+
alg: {
|
|
84
|
+
type: "string",
|
|
85
|
+
description: "The algorithm intended for use with the key (JWA algorithm name)."
|
|
86
|
+
},
|
|
87
|
+
use: {
|
|
88
|
+
$ref: "#/components/schemas/JwkUse"
|
|
89
|
+
},
|
|
90
|
+
keyOps: {
|
|
91
|
+
type: "array",
|
|
92
|
+
items: {
|
|
93
|
+
$ref: "#/components/schemas/KeyOperations"
|
|
172
94
|
},
|
|
173
|
-
|
|
174
|
-
"kty"
|
|
175
|
-
],
|
|
176
|
-
additionalProperties: false,
|
|
177
|
-
description: "Represents a JSON Web Key (JWK) as defined by the JSON Web Key specification."
|
|
95
|
+
description: "The allowed cryptographic operations for the key."
|
|
178
96
|
},
|
|
179
|
-
|
|
97
|
+
crv: {
|
|
98
|
+
$ref: "#/components/schemas/Curve"
|
|
99
|
+
},
|
|
100
|
+
x: {
|
|
180
101
|
type: "string",
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
"OKP",
|
|
185
|
-
"oct"
|
|
186
|
-
],
|
|
187
|
-
description: "JSON Web Key (JWK) key type parameter identifying the cryptographic algorithm family."
|
|
188
|
-
},
|
|
189
|
-
JwkUse: {
|
|
102
|
+
description: "The x coordinate for elliptic curve keys (base64url-encoded)."
|
|
103
|
+
},
|
|
104
|
+
y: {
|
|
190
105
|
type: "string",
|
|
191
|
-
|
|
192
|
-
"sig",
|
|
193
|
-
"enc"
|
|
194
|
-
],
|
|
195
|
-
description: "Intended use of the key (signing or encryption)."
|
|
106
|
+
description: "The y coordinate for elliptic curve keys (base64url-encoded)."
|
|
196
107
|
},
|
|
197
|
-
|
|
108
|
+
d: {
|
|
198
109
|
type: "string",
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
"encrypt",
|
|
203
|
-
"decrypt",
|
|
204
|
-
"wrapKey",
|
|
205
|
-
"unwrapKey",
|
|
206
|
-
"deriveKey",
|
|
207
|
-
"deriveBits"
|
|
208
|
-
],
|
|
209
|
-
description: "Specific operations the key is intended for."
|
|
210
|
-
},
|
|
211
|
-
Curve: {
|
|
110
|
+
description: "The private key parameter (base64url-encoded)."
|
|
111
|
+
},
|
|
112
|
+
n: {
|
|
212
113
|
type: "string",
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
"P-521",
|
|
217
|
-
"secp256k1",
|
|
218
|
-
"Ed25519",
|
|
219
|
-
"Ed448",
|
|
220
|
-
"X25519",
|
|
221
|
-
"X448"
|
|
222
|
-
],
|
|
223
|
-
description: "Elliptic curve identifier."
|
|
224
|
-
},
|
|
225
|
-
SignatureAlgorithm: {
|
|
114
|
+
description: "The modulus value for RSA keys (base64url-encoded)."
|
|
115
|
+
},
|
|
116
|
+
e: {
|
|
226
117
|
type: "string",
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
"ECDSA_SHA384",
|
|
231
|
-
"ECDSA_SHA512",
|
|
232
|
-
"ES256K",
|
|
233
|
-
"ECKA_DH_SHA256",
|
|
234
|
-
"HMAC_SHA256",
|
|
235
|
-
"HMAC_SHA384",
|
|
236
|
-
"HMAC_SHA512",
|
|
237
|
-
"RSA_SSA_PSS_SHA256_MGF1",
|
|
238
|
-
"RSA_SSA_PSS_SHA384_MGF1",
|
|
239
|
-
"RSA_SSA_PSS_SHA512_MGF1"
|
|
240
|
-
],
|
|
241
|
-
description: "Cryptographic signature algorithm identifier."
|
|
242
|
-
},
|
|
243
|
-
KeyVisibility: {
|
|
118
|
+
description: "The public exponent for RSA keys (base64url-encoded)."
|
|
119
|
+
},
|
|
120
|
+
p: {
|
|
244
121
|
type: "string",
|
|
245
|
-
|
|
246
|
-
"PUBLIC",
|
|
247
|
-
"PRIVATE"
|
|
248
|
-
],
|
|
249
|
-
description: "Indicates the visibility status of a cryptographic key."
|
|
122
|
+
description: "The first prime factor for RSA private keys (base64url-encoded)."
|
|
250
123
|
},
|
|
251
|
-
|
|
124
|
+
q: {
|
|
252
125
|
type: "string",
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
"RSA"
|
|
257
|
-
],
|
|
258
|
-
description: "Cryptographic key type identifier."
|
|
259
|
-
},
|
|
260
|
-
KeyEncoding: {
|
|
126
|
+
description: "The second prime factor for RSA private keys (base64url-encoded)."
|
|
127
|
+
},
|
|
128
|
+
dp: {
|
|
261
129
|
type: "string",
|
|
262
|
-
|
|
263
|
-
"COSE",
|
|
264
|
-
"JOSE"
|
|
265
|
-
],
|
|
266
|
-
description: "The encoding format of the cryptographic key."
|
|
130
|
+
description: "The first factor CRT exponent for RSA private keys (base64url-encoded)."
|
|
267
131
|
},
|
|
268
|
-
|
|
269
|
-
type: "
|
|
270
|
-
|
|
271
|
-
signature: {
|
|
272
|
-
type: "string",
|
|
273
|
-
description: "The created signature encoded as a base64 string."
|
|
274
|
-
}
|
|
275
|
-
},
|
|
276
|
-
required: [
|
|
277
|
-
"signature"
|
|
278
|
-
],
|
|
279
|
-
additionalProperties: false,
|
|
280
|
-
description: "Response body containing the created signature."
|
|
132
|
+
dq: {
|
|
133
|
+
type: "string",
|
|
134
|
+
description: "The second factor CRT exponent for RSA private keys (base64url-encoded)."
|
|
281
135
|
},
|
|
282
|
-
|
|
283
|
-
type: "
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
|
|
136
|
+
qi: {
|
|
137
|
+
type: "string",
|
|
138
|
+
description: "The first CRT coefficient for RSA private keys (base64url-encoded)."
|
|
139
|
+
},
|
|
140
|
+
k: {
|
|
141
|
+
type: "string",
|
|
142
|
+
description: "The symmetric key value (base64url-encoded)."
|
|
143
|
+
},
|
|
144
|
+
x5c: {
|
|
145
|
+
type: "array",
|
|
146
|
+
items: {
|
|
147
|
+
type: "string"
|
|
291
148
|
},
|
|
292
|
-
|
|
149
|
+
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
293
150
|
},
|
|
294
|
-
|
|
295
|
-
type: "
|
|
296
|
-
|
|
297
|
-
|
|
298
|
-
|
|
299
|
-
|
|
300
|
-
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
|
|
304
|
-
|
|
305
|
-
|
|
306
|
-
|
|
307
|
-
|
|
308
|
-
|
|
309
|
-
|
|
310
|
-
|
|
311
|
-
|
|
312
|
-
|
|
313
|
-
|
|
314
|
-
|
|
315
|
-
|
|
316
|
-
|
|
317
|
-
|
|
318
|
-
|
|
319
|
-
|
|
320
|
-
|
|
151
|
+
x5t: {
|
|
152
|
+
type: "string",
|
|
153
|
+
description: "X.509 certificate SHA-1 thumbprint (base64url-encoded)."
|
|
154
|
+
},
|
|
155
|
+
x5u: {
|
|
156
|
+
type: "string",
|
|
157
|
+
description: "URL pointing to X.509 certificate or certificate chain."
|
|
158
|
+
},
|
|
159
|
+
x5tS256: {
|
|
160
|
+
type: "string",
|
|
161
|
+
description: "X.509 certificate SHA-256 thumbprint (base64url-encoded)."
|
|
162
|
+
}
|
|
163
|
+
},
|
|
164
|
+
required: ["kty"],
|
|
165
|
+
additionalProperties: false,
|
|
166
|
+
description: "Represents a JSON Web Key (JWK) as defined by the JSON Web Key specification."
|
|
167
|
+
},
|
|
168
|
+
JwkKeyType: {
|
|
169
|
+
type: "string",
|
|
170
|
+
enum: ["EC", "RSA", "OKP", "oct"],
|
|
171
|
+
description: "JSON Web Key (JWK) key type parameter identifying the cryptographic algorithm family."
|
|
172
|
+
},
|
|
173
|
+
JwkUse: {
|
|
174
|
+
type: "string",
|
|
175
|
+
enum: ["sig", "enc"],
|
|
176
|
+
description: "Intended use of the key (signing or encryption)."
|
|
177
|
+
},
|
|
178
|
+
KeyOperations: {
|
|
179
|
+
type: "string",
|
|
180
|
+
enum: ["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"],
|
|
181
|
+
description: "Specific operations the key is intended for."
|
|
182
|
+
},
|
|
183
|
+
Curve: {
|
|
184
|
+
type: "string",
|
|
185
|
+
enum: ["P-256", "P-384", "P-521", "secp256k1", "Ed25519", "Ed448", "X25519", "X448"],
|
|
186
|
+
description: "Elliptic curve identifier."
|
|
187
|
+
},
|
|
188
|
+
SignatureAlgorithm: {
|
|
189
|
+
type: "string",
|
|
190
|
+
enum: [
|
|
191
|
+
"ED25519",
|
|
192
|
+
"ECDSA_SHA256",
|
|
193
|
+
"ECDSA_SHA384",
|
|
194
|
+
"ECDSA_SHA512",
|
|
195
|
+
"ES256K",
|
|
196
|
+
"ECKA_DH_SHA256",
|
|
197
|
+
"HMAC_SHA256",
|
|
198
|
+
"HMAC_SHA384",
|
|
199
|
+
"HMAC_SHA512",
|
|
200
|
+
"RSA_SSA_PSS_SHA256_MGF1",
|
|
201
|
+
"RSA_SSA_PSS_SHA384_MGF1",
|
|
202
|
+
"RSA_SSA_PSS_SHA512_MGF1"
|
|
203
|
+
],
|
|
204
|
+
description: "Cryptographic signature algorithm identifier."
|
|
205
|
+
},
|
|
206
|
+
KeyVisibility: {
|
|
207
|
+
type: "string",
|
|
208
|
+
enum: ["PUBLIC", "PRIVATE"],
|
|
209
|
+
description: "Indicates the visibility status of a cryptographic key."
|
|
210
|
+
},
|
|
211
|
+
KeyType: {
|
|
212
|
+
type: "string",
|
|
213
|
+
enum: ["OKP", "EC", "RSA"],
|
|
214
|
+
description: "Cryptographic key type identifier."
|
|
215
|
+
},
|
|
216
|
+
KeyEncoding: {
|
|
217
|
+
type: "string",
|
|
218
|
+
enum: ["COSE", "JOSE"],
|
|
219
|
+
description: "The encoding format of the cryptographic key."
|
|
220
|
+
},
|
|
221
|
+
CreateRawSignatureResponse: {
|
|
222
|
+
type: "object",
|
|
223
|
+
properties: {
|
|
224
|
+
signature: {
|
|
225
|
+
type: "string",
|
|
226
|
+
description: "The created signature encoded as a base64 string."
|
|
227
|
+
}
|
|
228
|
+
},
|
|
229
|
+
required: ["signature"],
|
|
230
|
+
additionalProperties: false,
|
|
231
|
+
description: "Response body containing the created signature."
|
|
232
|
+
},
|
|
233
|
+
KmsDeleteKeyArgs: {
|
|
234
|
+
type: "object",
|
|
235
|
+
properties: {
|
|
236
|
+
baseUrl: {
|
|
237
|
+
type: "string"
|
|
238
|
+
},
|
|
239
|
+
aliasOrKid: {
|
|
240
|
+
type: "string"
|
|
241
|
+
}
|
|
242
|
+
},
|
|
243
|
+
additionalProperties: false
|
|
244
|
+
},
|
|
245
|
+
KmsGenerateKeyArgs: {
|
|
246
|
+
type: "object",
|
|
247
|
+
additionalProperties: false,
|
|
248
|
+
properties: {
|
|
249
|
+
alias: {
|
|
250
|
+
type: "string",
|
|
251
|
+
description: "Alias for the generated key."
|
|
252
|
+
},
|
|
253
|
+
use: {
|
|
254
|
+
$ref: "#/components/schemas/JwkUse"
|
|
255
|
+
},
|
|
256
|
+
keyOperations: {
|
|
257
|
+
type: "array",
|
|
258
|
+
items: {
|
|
259
|
+
$ref: "#/components/schemas/KeyOperations"
|
|
321
260
|
}
|
|
322
261
|
},
|
|
323
|
-
|
|
324
|
-
|
|
325
|
-
properties: {
|
|
326
|
-
kid: {
|
|
327
|
-
type: "string",
|
|
328
|
-
description: "Key identifier, may be null."
|
|
329
|
-
},
|
|
330
|
-
providerId: {
|
|
331
|
-
type: "string",
|
|
332
|
-
description: "Key Management System identifier."
|
|
333
|
-
},
|
|
334
|
-
alias: {
|
|
335
|
-
type: "string",
|
|
336
|
-
description: "Reference to the key in the KMS."
|
|
337
|
-
},
|
|
338
|
-
cose: {
|
|
339
|
-
$ref: "#/components/schemas/CoseKeyPair"
|
|
340
|
-
},
|
|
341
|
-
jose: {
|
|
342
|
-
$ref: "#/components/schemas/JoseKeyPair"
|
|
343
|
-
}
|
|
344
|
-
},
|
|
345
|
-
required: [
|
|
346
|
-
"providerId",
|
|
347
|
-
"alias",
|
|
348
|
-
"cose",
|
|
349
|
-
"jose"
|
|
350
|
-
],
|
|
351
|
-
additionalProperties: false,
|
|
352
|
-
description: "Represents a key pair used by a crypto provider, encapsulating both JOSE and COSE key pairs."
|
|
353
|
-
},
|
|
354
|
-
CoseKeyPair: {
|
|
355
|
-
type: "object",
|
|
356
|
-
properties: {
|
|
357
|
-
privateCoseKey: {
|
|
358
|
-
$ref: "#/components/schemas/CoseKey"
|
|
359
|
-
},
|
|
360
|
-
publicCoseKey: {
|
|
361
|
-
$ref: "#/components/schemas/CoseKey"
|
|
362
|
-
}
|
|
363
|
-
},
|
|
364
|
-
required: [
|
|
365
|
-
"publicCoseKey"
|
|
366
|
-
],
|
|
367
|
-
additionalProperties: false,
|
|
368
|
-
description: "Represents a cryptographic key pair for COSE (CBOR Object Signing and Encryption) operations."
|
|
262
|
+
alg: {
|
|
263
|
+
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
369
264
|
},
|
|
370
|
-
|
|
371
|
-
type: "
|
|
372
|
-
|
|
373
|
-
kty: {
|
|
374
|
-
$ref: "#/components/schemas/CoseKeyType"
|
|
375
|
-
},
|
|
376
|
-
kid: {
|
|
377
|
-
type: "string",
|
|
378
|
-
description: "Key identifier (base64url-encoded byte string)."
|
|
379
|
-
},
|
|
380
|
-
alg: {
|
|
381
|
-
type: "number",
|
|
382
|
-
description: "The COSE algorithm identifier (e.g., -7=ES256, -35=ES384, -36=ES512, -8=EdDSA)."
|
|
383
|
-
},
|
|
384
|
-
keyOps: {
|
|
385
|
-
type: "array",
|
|
386
|
-
items: {
|
|
387
|
-
type: "number"
|
|
388
|
-
},
|
|
389
|
-
description: "The allowed COSE key operations (1=sign, 2=verify, 3=encrypt, 4=decrypt, etc.)."
|
|
390
|
-
},
|
|
391
|
-
baseIV: {
|
|
392
|
-
type: "string",
|
|
393
|
-
description: "Base initialization vector (base64url-encoded)."
|
|
394
|
-
},
|
|
395
|
-
crv: {
|
|
396
|
-
type: "number",
|
|
397
|
-
description: "The COSE curve identifier (1=P-256, 2=P-384, 3=P-521, 8=secp256k1, 6=Ed25519, etc.)."
|
|
398
|
-
},
|
|
399
|
-
x: {
|
|
400
|
-
type: "string",
|
|
401
|
-
description: "The x coordinate (base64url-encoded byte string)."
|
|
402
|
-
},
|
|
403
|
-
y: {
|
|
404
|
-
type: "string",
|
|
405
|
-
description: "The y coordinate (base64url-encoded byte string)."
|
|
406
|
-
},
|
|
407
|
-
d: {
|
|
408
|
-
type: "string",
|
|
409
|
-
description: "The private key parameter (base64url-encoded byte string)."
|
|
410
|
-
},
|
|
411
|
-
x5chain: {
|
|
412
|
-
type: "array",
|
|
413
|
-
items: {
|
|
414
|
-
type: "string"
|
|
415
|
-
},
|
|
416
|
-
description: "X.509 certificate chain as base64-encoded certificates."
|
|
417
|
-
}
|
|
418
|
-
},
|
|
419
|
-
required: [
|
|
420
|
-
"kty"
|
|
421
|
-
],
|
|
422
|
-
additionalProperties: false,
|
|
423
|
-
description: "Represents a COSE (CBOR Object Signing and Encryption) key in JSON format."
|
|
265
|
+
providerId: {
|
|
266
|
+
type: "string",
|
|
267
|
+
description: "Optional provider ID. If not specified, the default provider will be used."
|
|
424
268
|
},
|
|
425
|
-
|
|
426
|
-
type: "
|
|
427
|
-
|
|
428
|
-
|
|
429
|
-
|
|
430
|
-
|
|
431
|
-
|
|
432
|
-
|
|
433
|
-
|
|
434
|
-
|
|
435
|
-
|
|
436
|
-
type: "object",
|
|
437
|
-
properties: {
|
|
438
|
-
privateJwk: {
|
|
439
|
-
$ref: "#/components/schemas/Jwk"
|
|
440
|
-
},
|
|
441
|
-
publicJwk: {
|
|
442
|
-
$ref: "#/components/schemas/Jwk"
|
|
443
|
-
}
|
|
444
|
-
},
|
|
445
|
-
required: [
|
|
446
|
-
"publicJwk"
|
|
447
|
-
],
|
|
448
|
-
additionalProperties: false,
|
|
449
|
-
description: "Data class representing a cryptographic key pair used with JOSE (JSON Object Signing and Encryption)."
|
|
269
|
+
baseUrl: {
|
|
270
|
+
type: "string"
|
|
271
|
+
}
|
|
272
|
+
}
|
|
273
|
+
},
|
|
274
|
+
ManagedKeyPair: {
|
|
275
|
+
type: "object",
|
|
276
|
+
properties: {
|
|
277
|
+
kid: {
|
|
278
|
+
type: "string",
|
|
279
|
+
description: "Key identifier, may be null."
|
|
450
280
|
},
|
|
451
|
-
|
|
452
|
-
type: "
|
|
453
|
-
|
|
454
|
-
baseUrl: {
|
|
455
|
-
type: "string"
|
|
456
|
-
},
|
|
457
|
-
aliasOrKid: {
|
|
458
|
-
type: "string"
|
|
459
|
-
}
|
|
460
|
-
},
|
|
461
|
-
required: [
|
|
462
|
-
"aliasOrKid"
|
|
463
|
-
],
|
|
464
|
-
additionalProperties: false
|
|
281
|
+
providerId: {
|
|
282
|
+
type: "string",
|
|
283
|
+
description: "Key Management System identifier."
|
|
465
284
|
},
|
|
466
|
-
|
|
467
|
-
type: "
|
|
468
|
-
|
|
469
|
-
kid: {
|
|
470
|
-
type: "string",
|
|
471
|
-
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
472
|
-
},
|
|
473
|
-
key: {
|
|
474
|
-
$ref: "#/components/schemas/Jwk"
|
|
475
|
-
},
|
|
476
|
-
signatureAlgorithm: {
|
|
477
|
-
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
478
|
-
},
|
|
479
|
-
keyVisibility: {
|
|
480
|
-
$ref: "#/components/schemas/KeyVisibility"
|
|
481
|
-
},
|
|
482
|
-
x5c: {
|
|
483
|
-
type: "array",
|
|
484
|
-
items: {
|
|
485
|
-
type: "string"
|
|
486
|
-
},
|
|
487
|
-
description: "X.509 certificate chain associated with the key."
|
|
488
|
-
},
|
|
489
|
-
alias: {
|
|
490
|
-
type: "string",
|
|
491
|
-
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
492
|
-
},
|
|
493
|
-
providerId: {
|
|
494
|
-
type: "string",
|
|
495
|
-
description: "The Key Management System (KMS) identifier associated with the key."
|
|
496
|
-
},
|
|
497
|
-
keyType: {
|
|
498
|
-
$ref: "#/components/schemas/KeyType"
|
|
499
|
-
},
|
|
500
|
-
keyEncoding: {
|
|
501
|
-
$ref: "#/components/schemas/KeyEncoding"
|
|
502
|
-
},
|
|
503
|
-
opts: {
|
|
504
|
-
type: "object",
|
|
505
|
-
additionalProperties: {
|
|
506
|
-
type: "string"
|
|
507
|
-
},
|
|
508
|
-
description: "Additional configuration options as key-value pairs."
|
|
509
|
-
}
|
|
510
|
-
},
|
|
511
|
-
required: [
|
|
512
|
-
"key",
|
|
513
|
-
"alias",
|
|
514
|
-
"providerId"
|
|
515
|
-
],
|
|
516
|
-
additionalProperties: false,
|
|
517
|
-
description: "Represents a managed cryptographic key information that is guaranteed to be present and resolved, part of a KMS providing concrete access to the key."
|
|
518
|
-
},
|
|
519
|
-
KmsGetKeyProviderArgs: {
|
|
520
|
-
type: "object",
|
|
521
|
-
properties: {
|
|
522
|
-
baseUrl: {
|
|
523
|
-
type: "string"
|
|
524
|
-
},
|
|
525
|
-
providerId: {
|
|
526
|
-
type: "string"
|
|
527
|
-
}
|
|
528
|
-
},
|
|
529
|
-
additionalProperties: false
|
|
285
|
+
alias: {
|
|
286
|
+
type: "string",
|
|
287
|
+
description: "Reference to the key in the KMS."
|
|
530
288
|
},
|
|
531
|
-
|
|
532
|
-
|
|
533
|
-
|
|
534
|
-
|
|
535
|
-
|
|
536
|
-
|
|
537
|
-
|
|
538
|
-
|
|
539
|
-
|
|
540
|
-
|
|
541
|
-
|
|
542
|
-
|
|
543
|
-
|
|
544
|
-
|
|
545
|
-
|
|
546
|
-
|
|
547
|
-
|
|
548
|
-
|
|
549
|
-
|
|
289
|
+
cose: {
|
|
290
|
+
$ref: "#/components/schemas/CoseKeyPair"
|
|
291
|
+
},
|
|
292
|
+
jose: {
|
|
293
|
+
$ref: "#/components/schemas/JoseKeyPair"
|
|
294
|
+
}
|
|
295
|
+
},
|
|
296
|
+
required: ["providerId", "alias", "cose", "jose"],
|
|
297
|
+
additionalProperties: false,
|
|
298
|
+
description: "Represents a key pair used by a crypto provider, encapsulating both JOSE and COSE key pairs."
|
|
299
|
+
},
|
|
300
|
+
CoseKeyPair: {
|
|
301
|
+
type: "object",
|
|
302
|
+
properties: {
|
|
303
|
+
privateCoseKey: {
|
|
304
|
+
$ref: "#/components/schemas/CoseKey"
|
|
305
|
+
},
|
|
306
|
+
publicCoseKey: {
|
|
307
|
+
$ref: "#/components/schemas/CoseKey"
|
|
308
|
+
}
|
|
309
|
+
},
|
|
310
|
+
required: ["publicCoseKey"],
|
|
311
|
+
additionalProperties: false,
|
|
312
|
+
description: "Represents a cryptographic key pair for COSE (CBOR Object Signing and Encryption) operations."
|
|
313
|
+
},
|
|
314
|
+
CoseKey: {
|
|
315
|
+
type: "object",
|
|
316
|
+
properties: {
|
|
317
|
+
kty: {
|
|
318
|
+
$ref: "#/components/schemas/CoseKeyType"
|
|
319
|
+
},
|
|
320
|
+
kid: {
|
|
550
321
|
type: "string",
|
|
551
|
-
|
|
552
|
-
"SOFTWARE",
|
|
553
|
-
"AZURE_KEYVAULT",
|
|
554
|
-
"AWS_KMS"
|
|
555
|
-
],
|
|
556
|
-
description: "The type of Key Provider. Determines the required configuration settings. - AZURE_KEYVAULT: Microsoft Azure Key Vault or Managed HSM. - AWS_KMS: Amazon Web Services Key Management Service."
|
|
557
|
-
},
|
|
558
|
-
kmsGetResolverArgs: {
|
|
559
|
-
type: "object",
|
|
560
|
-
properties: {
|
|
561
|
-
baseUrl: {
|
|
562
|
-
type: "string"
|
|
563
|
-
},
|
|
564
|
-
resolverId: {
|
|
565
|
-
type: "string"
|
|
566
|
-
}
|
|
567
|
-
},
|
|
568
|
-
required: [
|
|
569
|
-
"resolverId"
|
|
570
|
-
],
|
|
571
|
-
additionalProperties: false
|
|
322
|
+
description: "Key identifier (base64url-encoded byte string)."
|
|
572
323
|
},
|
|
573
|
-
|
|
574
|
-
type: "
|
|
575
|
-
|
|
576
|
-
|
|
577
|
-
|
|
578
|
-
|
|
579
|
-
|
|
580
|
-
|
|
581
|
-
type: "array",
|
|
582
|
-
items: {
|
|
583
|
-
$ref: "#/components/schemas/IdentifierMethod"
|
|
584
|
-
},
|
|
585
|
-
description: "List of identifier methods supported by this resolver."
|
|
586
|
-
},
|
|
587
|
-
supportedKeyTypes: {
|
|
588
|
-
type: "array",
|
|
589
|
-
items: {
|
|
590
|
-
$ref: "#/components/schemas/KeyType"
|
|
591
|
-
},
|
|
592
|
-
description: "List of key types supported by this resolver."
|
|
593
|
-
}
|
|
324
|
+
alg: {
|
|
325
|
+
type: "number",
|
|
326
|
+
description: "The COSE algorithm identifier (e.g., -7=ES256, -35=ES384, -36=ES512, -8=EdDSA)."
|
|
327
|
+
},
|
|
328
|
+
keyOps: {
|
|
329
|
+
type: "array",
|
|
330
|
+
items: {
|
|
331
|
+
type: "number"
|
|
594
332
|
},
|
|
595
|
-
|
|
596
|
-
"resolverId"
|
|
597
|
-
],
|
|
598
|
-
additionalProperties: false,
|
|
599
|
-
description: "Represents a key resolver configuration."
|
|
333
|
+
description: "The allowed COSE key operations (1=sign, 2=verify, 3=encrypt, 4=decrypt, etc.)."
|
|
600
334
|
},
|
|
601
|
-
|
|
335
|
+
baseIV: {
|
|
602
336
|
type: "string",
|
|
603
|
-
|
|
604
|
-
"JWK",
|
|
605
|
-
"KID",
|
|
606
|
-
"COSE_KEY",
|
|
607
|
-
"X5C",
|
|
608
|
-
"DID"
|
|
609
|
-
],
|
|
610
|
-
description: "Method used to identify cryptographic keys."
|
|
611
|
-
},
|
|
612
|
-
KmsIsValidRawSignatureArgs: {
|
|
613
|
-
type: "object",
|
|
614
|
-
additionalProperties: false,
|
|
615
|
-
properties: {
|
|
616
|
-
keyInfo: {
|
|
617
|
-
$ref: "#/components/schemas/KeyInfo"
|
|
618
|
-
},
|
|
619
|
-
input: {
|
|
620
|
-
type: "string"
|
|
621
|
-
},
|
|
622
|
-
signature: {
|
|
623
|
-
type: "string"
|
|
624
|
-
},
|
|
625
|
-
baseUrl: {
|
|
626
|
-
type: "string"
|
|
627
|
-
}
|
|
628
|
-
},
|
|
629
|
-
required: [
|
|
630
|
-
"input",
|
|
631
|
-
"keyInfo",
|
|
632
|
-
"signature"
|
|
633
|
-
]
|
|
337
|
+
description: "Base initialization vector (base64url-encoded)."
|
|
634
338
|
},
|
|
635
|
-
|
|
636
|
-
type: "
|
|
637
|
-
|
|
638
|
-
isValid: {
|
|
639
|
-
type: "boolean",
|
|
640
|
-
description: "Indicates whether the signature is valid or not."
|
|
641
|
-
}
|
|
642
|
-
},
|
|
643
|
-
required: [
|
|
644
|
-
"isValid"
|
|
645
|
-
],
|
|
646
|
-
additionalProperties: false,
|
|
647
|
-
description: "Response body containing the details of the signature verification."
|
|
339
|
+
crv: {
|
|
340
|
+
type: "number",
|
|
341
|
+
description: "The COSE curve identifier (1=P-256, 2=P-384, 3=P-521, 8=secp256k1, 6=Ed25519, etc.)."
|
|
648
342
|
},
|
|
649
|
-
|
|
650
|
-
type: "
|
|
651
|
-
|
|
652
|
-
baseUrl: {
|
|
653
|
-
type: "string"
|
|
654
|
-
}
|
|
655
|
-
},
|
|
656
|
-
additionalProperties: false
|
|
343
|
+
x: {
|
|
344
|
+
type: "string",
|
|
345
|
+
description: "The x coordinate (base64url-encoded byte string)."
|
|
657
346
|
},
|
|
658
|
-
|
|
659
|
-
type: "
|
|
660
|
-
|
|
661
|
-
providers: {
|
|
662
|
-
type: "array",
|
|
663
|
-
items: {
|
|
664
|
-
$ref: "#/components/schemas/KeyProvider"
|
|
665
|
-
}
|
|
666
|
-
}
|
|
667
|
-
},
|
|
668
|
-
required: [
|
|
669
|
-
"providers"
|
|
670
|
-
],
|
|
671
|
-
additionalProperties: false,
|
|
672
|
-
description: "Response body containing the details of a Key Provider instance."
|
|
347
|
+
y: {
|
|
348
|
+
type: "string",
|
|
349
|
+
description: "The y coordinate (base64url-encoded byte string)."
|
|
673
350
|
},
|
|
674
|
-
|
|
675
|
-
type: "
|
|
676
|
-
|
|
677
|
-
providerId: {
|
|
678
|
-
type: "string",
|
|
679
|
-
description: "The unique identifier assigned to the Key Provider instance upon creation."
|
|
680
|
-
},
|
|
681
|
-
type: {
|
|
682
|
-
$ref: "#/components/schemas/KeyProviderType"
|
|
683
|
-
}
|
|
684
|
-
},
|
|
685
|
-
required: [
|
|
686
|
-
"providerId",
|
|
687
|
-
"type"
|
|
688
|
-
],
|
|
689
|
-
additionalProperties: false,
|
|
690
|
-
description: "Response body containing the details of a Key Provider instance."
|
|
691
|
-
},
|
|
692
|
-
KmsListKeysArgs: {
|
|
693
|
-
type: "object",
|
|
694
|
-
properties: {
|
|
695
|
-
baseUrl: {
|
|
696
|
-
type: "string"
|
|
697
|
-
},
|
|
698
|
-
providerId: {
|
|
699
|
-
type: "string"
|
|
700
|
-
}
|
|
701
|
-
},
|
|
702
|
-
additionalProperties: false
|
|
351
|
+
d: {
|
|
352
|
+
type: "string",
|
|
353
|
+
description: "The private key parameter (base64url-encoded byte string)."
|
|
703
354
|
},
|
|
704
|
-
|
|
705
|
-
type: "
|
|
706
|
-
|
|
707
|
-
|
|
708
|
-
type: "array",
|
|
709
|
-
items: {
|
|
710
|
-
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
711
|
-
}
|
|
712
|
-
}
|
|
355
|
+
x5chain: {
|
|
356
|
+
type: "array",
|
|
357
|
+
items: {
|
|
358
|
+
type: "string"
|
|
713
359
|
},
|
|
714
|
-
|
|
715
|
-
|
|
716
|
-
|
|
717
|
-
|
|
718
|
-
|
|
360
|
+
description: "X.509 certificate chain as base64-encoded certificates."
|
|
361
|
+
}
|
|
362
|
+
},
|
|
363
|
+
required: ["kty"],
|
|
364
|
+
additionalProperties: false,
|
|
365
|
+
description: "Represents a COSE (CBOR Object Signing and Encryption) key in JSON format."
|
|
366
|
+
},
|
|
367
|
+
CoseKeyType: {
|
|
368
|
+
type: "number",
|
|
369
|
+
enum: [1, 2, 3, 4],
|
|
370
|
+
description: "COSE key type parameter. 1=OKP (Octet Key Pair), 2=EC2 (Elliptic Curve), 3=RSA, 4=Symmetric."
|
|
371
|
+
},
|
|
372
|
+
JoseKeyPair: {
|
|
373
|
+
type: "object",
|
|
374
|
+
properties: {
|
|
375
|
+
privateJwk: {
|
|
376
|
+
$ref: "#/components/schemas/Jwk"
|
|
719
377
|
},
|
|
720
|
-
|
|
721
|
-
|
|
722
|
-
|
|
723
|
-
|
|
724
|
-
|
|
725
|
-
|
|
726
|
-
|
|
727
|
-
|
|
378
|
+
publicJwk: {
|
|
379
|
+
$ref: "#/components/schemas/Jwk"
|
|
380
|
+
}
|
|
381
|
+
},
|
|
382
|
+
required: ["publicJwk"],
|
|
383
|
+
additionalProperties: false,
|
|
384
|
+
description: "Data class representing a cryptographic key pair used with JOSE (JSON Object Signing and Encryption)."
|
|
385
|
+
},
|
|
386
|
+
KmsGetKeyArgs: {
|
|
387
|
+
type: "object",
|
|
388
|
+
properties: {
|
|
389
|
+
baseUrl: {
|
|
390
|
+
type: "string"
|
|
728
391
|
},
|
|
729
|
-
|
|
730
|
-
type: "
|
|
731
|
-
|
|
732
|
-
|
|
733
|
-
|
|
734
|
-
|
|
735
|
-
|
|
736
|
-
|
|
737
|
-
|
|
738
|
-
|
|
739
|
-
|
|
740
|
-
|
|
741
|
-
|
|
742
|
-
additionalProperties: false,
|
|
743
|
-
description: "Response body containing all the resolvers."
|
|
392
|
+
aliasOrKid: {
|
|
393
|
+
type: "string"
|
|
394
|
+
}
|
|
395
|
+
},
|
|
396
|
+
required: ["aliasOrKid"],
|
|
397
|
+
additionalProperties: false
|
|
398
|
+
},
|
|
399
|
+
ManagedKeyInfo: {
|
|
400
|
+
type: "object",
|
|
401
|
+
properties: {
|
|
402
|
+
kid: {
|
|
403
|
+
type: "string",
|
|
404
|
+
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
744
405
|
},
|
|
745
|
-
|
|
746
|
-
|
|
747
|
-
properties: {
|
|
748
|
-
baseUrl: {
|
|
749
|
-
type: "string"
|
|
750
|
-
},
|
|
751
|
-
providerId: {
|
|
752
|
-
type: "string"
|
|
753
|
-
},
|
|
754
|
-
aliasOrKid: {
|
|
755
|
-
type: "string"
|
|
756
|
-
}
|
|
757
|
-
},
|
|
758
|
-
required: [
|
|
759
|
-
"providerId",
|
|
760
|
-
"aliasOrKid"
|
|
761
|
-
],
|
|
762
|
-
additionalProperties: false
|
|
406
|
+
key: {
|
|
407
|
+
$ref: "#/components/schemas/Jwk"
|
|
763
408
|
},
|
|
764
|
-
|
|
765
|
-
|
|
766
|
-
additionalProperties: false,
|
|
767
|
-
properties: {
|
|
768
|
-
alias: {
|
|
769
|
-
type: "string",
|
|
770
|
-
description: "Alias for the generated key."
|
|
771
|
-
},
|
|
772
|
-
use: {
|
|
773
|
-
$ref: "#/components/schemas/JwkUse"
|
|
774
|
-
},
|
|
775
|
-
keyOperations: {
|
|
776
|
-
type: "array",
|
|
777
|
-
items: {
|
|
778
|
-
$ref: "#/components/schemas/KeyOperations"
|
|
779
|
-
}
|
|
780
|
-
},
|
|
781
|
-
alg: {
|
|
782
|
-
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
783
|
-
},
|
|
784
|
-
baseUrl: {
|
|
785
|
-
type: "string"
|
|
786
|
-
},
|
|
787
|
-
providerId: {
|
|
788
|
-
type: "string"
|
|
789
|
-
}
|
|
790
|
-
},
|
|
791
|
-
required: [
|
|
792
|
-
"providerId"
|
|
793
|
-
]
|
|
409
|
+
signatureAlgorithm: {
|
|
410
|
+
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
794
411
|
},
|
|
795
|
-
|
|
796
|
-
|
|
797
|
-
properties: {
|
|
798
|
-
baseUrl: {
|
|
799
|
-
type: "string"
|
|
800
|
-
},
|
|
801
|
-
providerId: {
|
|
802
|
-
type: "string"
|
|
803
|
-
},
|
|
804
|
-
aliasOrKid: {
|
|
805
|
-
type: "string"
|
|
806
|
-
}
|
|
807
|
-
},
|
|
808
|
-
required: [
|
|
809
|
-
"providerId",
|
|
810
|
-
"aliasOrKid"
|
|
811
|
-
],
|
|
812
|
-
additionalProperties: false
|
|
412
|
+
keyVisibility: {
|
|
413
|
+
$ref: "#/components/schemas/KeyVisibility"
|
|
813
414
|
},
|
|
814
|
-
|
|
815
|
-
type: "
|
|
816
|
-
|
|
817
|
-
|
|
818
|
-
type: "string"
|
|
819
|
-
},
|
|
820
|
-
providerId: {
|
|
821
|
-
type: "string"
|
|
822
|
-
}
|
|
415
|
+
x5c: {
|
|
416
|
+
type: "array",
|
|
417
|
+
items: {
|
|
418
|
+
type: "string"
|
|
823
419
|
},
|
|
824
|
-
|
|
825
|
-
"providerId"
|
|
826
|
-
],
|
|
827
|
-
additionalProperties: false
|
|
420
|
+
description: "X.509 certificate chain associated with the key."
|
|
828
421
|
},
|
|
829
|
-
|
|
830
|
-
type: "
|
|
831
|
-
|
|
832
|
-
properties: {
|
|
833
|
-
keyInfo: {
|
|
834
|
-
$ref: "#/components/schemas/ResolvedKeyInfo"
|
|
835
|
-
},
|
|
836
|
-
certChain: {
|
|
837
|
-
type: "array",
|
|
838
|
-
items: {
|
|
839
|
-
type: "string"
|
|
840
|
-
},
|
|
841
|
-
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
842
|
-
},
|
|
843
|
-
baseUrl: {
|
|
844
|
-
type: "string"
|
|
845
|
-
},
|
|
846
|
-
providerId: {
|
|
847
|
-
type: "string"
|
|
848
|
-
}
|
|
849
|
-
},
|
|
850
|
-
required: [
|
|
851
|
-
"keyInfo",
|
|
852
|
-
"providerId"
|
|
853
|
-
]
|
|
422
|
+
alias: {
|
|
423
|
+
type: "string",
|
|
424
|
+
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
854
425
|
},
|
|
855
|
-
|
|
856
|
-
type: "
|
|
857
|
-
|
|
858
|
-
kid: {
|
|
859
|
-
type: "string",
|
|
860
|
-
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
861
|
-
},
|
|
862
|
-
key: {
|
|
863
|
-
$ref: "#/components/schemas/Jwk"
|
|
864
|
-
},
|
|
865
|
-
signatureAlgorithm: {
|
|
866
|
-
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
867
|
-
},
|
|
868
|
-
keyVisibility: {
|
|
869
|
-
$ref: "#/components/schemas/KeyVisibility"
|
|
870
|
-
},
|
|
871
|
-
x5c: {
|
|
872
|
-
type: "array",
|
|
873
|
-
items: {
|
|
874
|
-
type: "string"
|
|
875
|
-
},
|
|
876
|
-
description: "X.509 certificate chain associated with the key."
|
|
877
|
-
},
|
|
878
|
-
alias: {
|
|
879
|
-
type: "string",
|
|
880
|
-
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
881
|
-
},
|
|
882
|
-
providerId: {
|
|
883
|
-
type: "string",
|
|
884
|
-
description: "The Key Management System (KMS) identifier associated with the key."
|
|
885
|
-
},
|
|
886
|
-
keyType: {
|
|
887
|
-
$ref: "#/components/schemas/KeyType"
|
|
888
|
-
},
|
|
889
|
-
keyEncoding: {
|
|
890
|
-
$ref: "#/components/schemas/KeyEncoding"
|
|
891
|
-
},
|
|
892
|
-
opts: {
|
|
893
|
-
type: "object",
|
|
894
|
-
additionalProperties: {
|
|
895
|
-
type: "string"
|
|
896
|
-
},
|
|
897
|
-
description: "Additional configuration options as key-value pairs."
|
|
898
|
-
}
|
|
899
|
-
},
|
|
900
|
-
required: [
|
|
901
|
-
"key"
|
|
902
|
-
],
|
|
903
|
-
additionalProperties: false,
|
|
904
|
-
description: "Represents a resolved cryptographic key information where the key is guaranteed to be present and resolved, providing concrete access to the key."
|
|
426
|
+
providerId: {
|
|
427
|
+
type: "string",
|
|
428
|
+
description: "The Key Management System (KMS) identifier associated with the key."
|
|
905
429
|
},
|
|
906
|
-
|
|
907
|
-
|
|
908
|
-
|
|
909
|
-
|
|
910
|
-
|
|
911
|
-
$ref: "#/components/schemas/KeyInfo"
|
|
912
|
-
},
|
|
913
|
-
identifierMethod: {
|
|
914
|
-
$ref: "#/components/schemas/IdentifierMethod"
|
|
915
|
-
},
|
|
916
|
-
trustedCerts: {
|
|
917
|
-
type: "array",
|
|
918
|
-
items: {
|
|
919
|
-
type: "string"
|
|
920
|
-
},
|
|
921
|
-
description: "Optional array of trusted certificates (base64-encoded) that may be used in the resolution process."
|
|
922
|
-
},
|
|
923
|
-
verifyX509CertificateChain: {
|
|
924
|
-
type: "boolean",
|
|
925
|
-
description: "Optional boolean indicating whether the X.509 certificate chain should be verified."
|
|
926
|
-
},
|
|
927
|
-
baseUrl: {
|
|
928
|
-
type: "string"
|
|
929
|
-
},
|
|
930
|
-
resolverId: {
|
|
931
|
-
$ref: "#/components/schemas/String"
|
|
932
|
-
}
|
|
933
|
-
},
|
|
934
|
-
required: [
|
|
935
|
-
"keyInfo",
|
|
936
|
-
"resolverId"
|
|
937
|
-
]
|
|
430
|
+
keyType: {
|
|
431
|
+
$ref: "#/components/schemas/KeyType"
|
|
432
|
+
},
|
|
433
|
+
keyEncoding: {
|
|
434
|
+
$ref: "#/components/schemas/KeyEncoding"
|
|
938
435
|
},
|
|
939
|
-
|
|
436
|
+
opts: {
|
|
940
437
|
type: "object",
|
|
941
|
-
properties: {
|
|
942
|
-
length: {
|
|
943
|
-
type: "number"
|
|
944
|
-
}
|
|
945
|
-
},
|
|
946
|
-
required: [
|
|
947
|
-
"length"
|
|
948
|
-
],
|
|
949
438
|
additionalProperties: {
|
|
950
439
|
type: "string"
|
|
951
|
-
}
|
|
952
|
-
},
|
|
953
|
-
KmsStoreKeyArgs: {
|
|
954
|
-
type: "object",
|
|
955
|
-
additionalProperties: false,
|
|
956
|
-
properties: {
|
|
957
|
-
keyInfo: {
|
|
958
|
-
$ref: "#/components/schemas/ResolvedKeyInfo"
|
|
959
|
-
},
|
|
960
|
-
certChain: {
|
|
961
|
-
type: "array",
|
|
962
|
-
items: {
|
|
963
|
-
type: "string"
|
|
964
|
-
},
|
|
965
|
-
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
966
|
-
},
|
|
967
|
-
baseUrl: {
|
|
968
|
-
type: "string"
|
|
969
|
-
}
|
|
970
440
|
},
|
|
971
|
-
|
|
972
|
-
"keyInfo"
|
|
973
|
-
]
|
|
441
|
+
description: "Additional configuration options as key-value pairs."
|
|
974
442
|
}
|
|
975
443
|
},
|
|
976
|
-
|
|
977
|
-
|
|
978
|
-
|
|
979
|
-
|
|
980
|
-
|
|
981
|
-
|
|
982
|
-
|
|
983
|
-
|
|
984
|
-
|
|
444
|
+
required: ["key", "alias", "providerId"],
|
|
445
|
+
additionalProperties: false,
|
|
446
|
+
description: "Represents a managed cryptographic key information that is guaranteed to be present and resolved, part of a KMS providing concrete access to the key."
|
|
447
|
+
},
|
|
448
|
+
KmsGetKeyProviderArgs: {
|
|
449
|
+
type: "object",
|
|
450
|
+
properties: {
|
|
451
|
+
baseUrl: {
|
|
452
|
+
type: "string"
|
|
985
453
|
},
|
|
986
|
-
|
|
987
|
-
|
|
988
|
-
|
|
989
|
-
|
|
990
|
-
|
|
991
|
-
|
|
992
|
-
|
|
993
|
-
|
|
454
|
+
providerId: {
|
|
455
|
+
type: "string"
|
|
456
|
+
}
|
|
457
|
+
},
|
|
458
|
+
additionalProperties: false
|
|
459
|
+
},
|
|
460
|
+
KeyProviderResponse: {
|
|
461
|
+
type: "object",
|
|
462
|
+
properties: {
|
|
463
|
+
providerId: {
|
|
464
|
+
type: "string",
|
|
465
|
+
description: "The unique identifier assigned to the Key Provider instance upon creation."
|
|
994
466
|
},
|
|
995
|
-
|
|
996
|
-
|
|
997
|
-
|
|
998
|
-
|
|
999
|
-
|
|
1000
|
-
|
|
1001
|
-
|
|
1002
|
-
|
|
467
|
+
type: {
|
|
468
|
+
$ref: "#/components/schemas/KeyProviderType"
|
|
469
|
+
}
|
|
470
|
+
},
|
|
471
|
+
required: ["providerId", "type"],
|
|
472
|
+
additionalProperties: false,
|
|
473
|
+
description: "Response body containing the details of a Key Provider instance."
|
|
474
|
+
},
|
|
475
|
+
KeyProviderType: {
|
|
476
|
+
type: "string",
|
|
477
|
+
enum: ["SOFTWARE", "AZURE_KEYVAULT", "AWS_KMS"],
|
|
478
|
+
description: "The type of Key Provider. Determines the required configuration settings. - AZURE_KEYVAULT: Microsoft Azure Key Vault or Managed HSM. - AWS_KMS: Amazon Web Services Key Management Service."
|
|
479
|
+
},
|
|
480
|
+
kmsGetResolverArgs: {
|
|
481
|
+
type: "object",
|
|
482
|
+
properties: {
|
|
483
|
+
baseUrl: {
|
|
484
|
+
type: "string"
|
|
1003
485
|
},
|
|
1004
|
-
|
|
1005
|
-
|
|
1006
|
-
|
|
1007
|
-
|
|
486
|
+
resolverId: {
|
|
487
|
+
type: "string"
|
|
488
|
+
}
|
|
489
|
+
},
|
|
490
|
+
required: ["resolverId"],
|
|
491
|
+
additionalProperties: false
|
|
492
|
+
},
|
|
493
|
+
Resolver: {
|
|
494
|
+
type: "object",
|
|
495
|
+
properties: {
|
|
496
|
+
resolverId: {
|
|
497
|
+
type: "string",
|
|
498
|
+
description: "Unique identifier for the resolver."
|
|
499
|
+
},
|
|
500
|
+
supportedIdentifierMethods: {
|
|
501
|
+
type: "array",
|
|
502
|
+
items: {
|
|
503
|
+
$ref: "#/components/schemas/IdentifierMethod"
|
|
1008
504
|
},
|
|
1009
|
-
|
|
1010
|
-
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
1011
|
-
}
|
|
505
|
+
description: "List of identifier methods supported by this resolver."
|
|
1012
506
|
},
|
|
1013
|
-
|
|
1014
|
-
|
|
1015
|
-
|
|
1016
|
-
$ref: "#/components/schemas/
|
|
507
|
+
supportedKeyTypes: {
|
|
508
|
+
type: "array",
|
|
509
|
+
items: {
|
|
510
|
+
$ref: "#/components/schemas/KeyType"
|
|
1017
511
|
},
|
|
1018
|
-
|
|
1019
|
-
|
|
512
|
+
description: "List of key types supported by this resolver."
|
|
513
|
+
}
|
|
514
|
+
},
|
|
515
|
+
required: ["resolverId"],
|
|
516
|
+
additionalProperties: false,
|
|
517
|
+
description: "Represents a key resolver configuration."
|
|
518
|
+
},
|
|
519
|
+
IdentifierMethod: {
|
|
520
|
+
type: "string",
|
|
521
|
+
enum: ["JWK", "KID", "COSE_KEY", "X5C", "DID"],
|
|
522
|
+
description: "Method used to identify cryptographic keys."
|
|
523
|
+
},
|
|
524
|
+
KmsIsValidRawSignatureArgs: {
|
|
525
|
+
type: "object",
|
|
526
|
+
additionalProperties: false,
|
|
527
|
+
properties: {
|
|
528
|
+
keyInfo: {
|
|
529
|
+
$ref: "#/components/schemas/KeyInfo"
|
|
530
|
+
},
|
|
531
|
+
input: {
|
|
532
|
+
type: "string"
|
|
533
|
+
},
|
|
534
|
+
signature: {
|
|
535
|
+
type: "string"
|
|
536
|
+
},
|
|
537
|
+
baseUrl: {
|
|
538
|
+
type: "string"
|
|
539
|
+
}
|
|
540
|
+
},
|
|
541
|
+
required: ["input", "keyInfo", "signature"]
|
|
542
|
+
},
|
|
543
|
+
VerifyRawSignatureResponse: {
|
|
544
|
+
type: "object",
|
|
545
|
+
properties: {
|
|
546
|
+
isValid: {
|
|
547
|
+
type: "boolean",
|
|
548
|
+
description: "Indicates whether the signature is valid or not."
|
|
549
|
+
}
|
|
550
|
+
},
|
|
551
|
+
required: ["isValid"],
|
|
552
|
+
additionalProperties: false,
|
|
553
|
+
description: "Response body containing the details of the signature verification."
|
|
554
|
+
},
|
|
555
|
+
KmsListKeyProvidersArgs: {
|
|
556
|
+
type: "object",
|
|
557
|
+
properties: {
|
|
558
|
+
baseUrl: {
|
|
559
|
+
type: "string"
|
|
560
|
+
}
|
|
561
|
+
},
|
|
562
|
+
additionalProperties: false
|
|
563
|
+
},
|
|
564
|
+
ListKeyProvidersResponse: {
|
|
565
|
+
type: "object",
|
|
566
|
+
properties: {
|
|
567
|
+
providers: {
|
|
568
|
+
type: "array",
|
|
569
|
+
items: {
|
|
570
|
+
$ref: "#/components/schemas/KeyProvider"
|
|
1020
571
|
}
|
|
572
|
+
}
|
|
573
|
+
},
|
|
574
|
+
required: ["providers"],
|
|
575
|
+
additionalProperties: false,
|
|
576
|
+
description: "Response body containing the details of a Key Provider instance."
|
|
577
|
+
},
|
|
578
|
+
KeyProvider: {
|
|
579
|
+
type: "object",
|
|
580
|
+
properties: {
|
|
581
|
+
providerId: {
|
|
582
|
+
type: "string",
|
|
583
|
+
description: "The unique identifier assigned to the Key Provider instance upon creation."
|
|
1021
584
|
},
|
|
1022
|
-
|
|
1023
|
-
|
|
1024
|
-
|
|
1025
|
-
|
|
1026
|
-
|
|
1027
|
-
|
|
585
|
+
type: {
|
|
586
|
+
$ref: "#/components/schemas/KeyProviderType"
|
|
587
|
+
}
|
|
588
|
+
},
|
|
589
|
+
required: ["providerId", "type"],
|
|
590
|
+
additionalProperties: false,
|
|
591
|
+
description: "Response body containing the details of a Key Provider instance."
|
|
592
|
+
},
|
|
593
|
+
KmsListKeysArgs: {
|
|
594
|
+
type: "object",
|
|
595
|
+
properties: {
|
|
596
|
+
baseUrl: {
|
|
597
|
+
type: "string"
|
|
598
|
+
},
|
|
599
|
+
providerId: {
|
|
600
|
+
type: "string"
|
|
601
|
+
}
|
|
602
|
+
},
|
|
603
|
+
additionalProperties: false
|
|
604
|
+
},
|
|
605
|
+
ListKeysResponse: {
|
|
606
|
+
type: "object",
|
|
607
|
+
properties: {
|
|
608
|
+
keyInfos: {
|
|
609
|
+
type: "array",
|
|
610
|
+
items: {
|
|
611
|
+
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
612
|
+
}
|
|
613
|
+
}
|
|
614
|
+
},
|
|
615
|
+
required: ["keyInfos"],
|
|
616
|
+
additionalProperties: false,
|
|
617
|
+
description: "Response body containing all the managed keys."
|
|
618
|
+
},
|
|
619
|
+
KmsListResolversArgs: {
|
|
620
|
+
type: "object",
|
|
621
|
+
properties: {
|
|
622
|
+
baseUrl: {
|
|
623
|
+
type: "string"
|
|
624
|
+
}
|
|
625
|
+
},
|
|
626
|
+
additionalProperties: false
|
|
627
|
+
},
|
|
628
|
+
ListResolversResponse: {
|
|
629
|
+
type: "object",
|
|
630
|
+
properties: {
|
|
631
|
+
resolvers: {
|
|
632
|
+
type: "array",
|
|
633
|
+
items: {
|
|
1028
634
|
$ref: "#/components/schemas/Resolver"
|
|
1029
635
|
}
|
|
636
|
+
}
|
|
637
|
+
},
|
|
638
|
+
required: ["resolvers"],
|
|
639
|
+
additionalProperties: false,
|
|
640
|
+
description: "Response body containing all the resolvers."
|
|
641
|
+
},
|
|
642
|
+
KmsProviderDeleteKeyArgs: {
|
|
643
|
+
type: "object",
|
|
644
|
+
properties: {
|
|
645
|
+
baseUrl: {
|
|
646
|
+
type: "string"
|
|
1030
647
|
},
|
|
1031
|
-
|
|
1032
|
-
|
|
1033
|
-
arguments: {
|
|
1034
|
-
$ref: "#/components/schemas/KmsIsValidRawSignatureArgs"
|
|
1035
|
-
},
|
|
1036
|
-
returnType: {
|
|
1037
|
-
$ref: "#/components/schemas/VerifyRawSignatureResponse"
|
|
1038
|
-
}
|
|
648
|
+
providerId: {
|
|
649
|
+
type: "string"
|
|
1039
650
|
},
|
|
1040
|
-
|
|
1041
|
-
|
|
1042
|
-
|
|
1043
|
-
|
|
1044
|
-
|
|
1045
|
-
|
|
1046
|
-
|
|
1047
|
-
|
|
651
|
+
aliasOrKid: {
|
|
652
|
+
type: "string"
|
|
653
|
+
}
|
|
654
|
+
},
|
|
655
|
+
required: ["providerId", "aliasOrKid"],
|
|
656
|
+
additionalProperties: false
|
|
657
|
+
},
|
|
658
|
+
KmsProviderGenerateKey: {
|
|
659
|
+
type: "object",
|
|
660
|
+
additionalProperties: false,
|
|
661
|
+
properties: {
|
|
662
|
+
alias: {
|
|
663
|
+
type: "string",
|
|
664
|
+
description: "Alias for the generated key."
|
|
1048
665
|
},
|
|
1049
|
-
|
|
1050
|
-
|
|
1051
|
-
arguments: {
|
|
1052
|
-
$ref: "#/components/schemas/KmsListKeysArgs"
|
|
1053
|
-
},
|
|
1054
|
-
returnType: {
|
|
1055
|
-
$ref: "#/components/schemas/ListKeysResponse"
|
|
1056
|
-
}
|
|
666
|
+
use: {
|
|
667
|
+
$ref: "#/components/schemas/JwkUse"
|
|
1057
668
|
},
|
|
1058
|
-
|
|
1059
|
-
|
|
1060
|
-
|
|
1061
|
-
$ref: "#/components/schemas/
|
|
1062
|
-
},
|
|
1063
|
-
returnType: {
|
|
1064
|
-
$ref: "#/components/schemas/ListResolversResponse"
|
|
669
|
+
keyOperations: {
|
|
670
|
+
type: "array",
|
|
671
|
+
items: {
|
|
672
|
+
$ref: "#/components/schemas/KeyOperations"
|
|
1065
673
|
}
|
|
1066
674
|
},
|
|
1067
|
-
|
|
1068
|
-
|
|
1069
|
-
arguments: {
|
|
1070
|
-
$ref: "#/components/schemas/KmsProviderDeleteKeyArgs"
|
|
1071
|
-
},
|
|
1072
|
-
returnType: {
|
|
1073
|
-
type: "boolean"
|
|
1074
|
-
}
|
|
675
|
+
alg: {
|
|
676
|
+
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
1075
677
|
},
|
|
1076
|
-
|
|
1077
|
-
|
|
1078
|
-
|
|
1079
|
-
|
|
1080
|
-
|
|
1081
|
-
|
|
1082
|
-
|
|
1083
|
-
|
|
678
|
+
baseUrl: {
|
|
679
|
+
type: "string"
|
|
680
|
+
},
|
|
681
|
+
providerId: {
|
|
682
|
+
type: "string"
|
|
683
|
+
}
|
|
684
|
+
},
|
|
685
|
+
required: ["providerId"]
|
|
686
|
+
},
|
|
687
|
+
KmsProviderGetKeyArgs: {
|
|
688
|
+
type: "object",
|
|
689
|
+
properties: {
|
|
690
|
+
baseUrl: {
|
|
691
|
+
type: "string"
|
|
692
|
+
},
|
|
693
|
+
providerId: {
|
|
694
|
+
type: "string"
|
|
695
|
+
},
|
|
696
|
+
aliasOrKid: {
|
|
697
|
+
type: "string"
|
|
698
|
+
}
|
|
699
|
+
},
|
|
700
|
+
required: ["providerId", "aliasOrKid"],
|
|
701
|
+
additionalProperties: false
|
|
702
|
+
},
|
|
703
|
+
KmsProviderListKeysArgs: {
|
|
704
|
+
type: "object",
|
|
705
|
+
properties: {
|
|
706
|
+
baseUrl: {
|
|
707
|
+
type: "string"
|
|
708
|
+
},
|
|
709
|
+
providerId: {
|
|
710
|
+
type: "string"
|
|
711
|
+
}
|
|
712
|
+
},
|
|
713
|
+
required: ["providerId"],
|
|
714
|
+
additionalProperties: false
|
|
715
|
+
},
|
|
716
|
+
KmsProviderStoreKey: {
|
|
717
|
+
type: "object",
|
|
718
|
+
additionalProperties: false,
|
|
719
|
+
properties: {
|
|
720
|
+
keyInfo: {
|
|
721
|
+
$ref: "#/components/schemas/ResolvedKeyInfo"
|
|
1084
722
|
},
|
|
1085
|
-
|
|
1086
|
-
|
|
1087
|
-
|
|
1088
|
-
|
|
723
|
+
certChain: {
|
|
724
|
+
type: "array",
|
|
725
|
+
items: {
|
|
726
|
+
type: "string"
|
|
1089
727
|
},
|
|
1090
|
-
|
|
1091
|
-
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
1092
|
-
}
|
|
728
|
+
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
1093
729
|
},
|
|
1094
|
-
|
|
1095
|
-
|
|
1096
|
-
|
|
1097
|
-
|
|
730
|
+
baseUrl: {
|
|
731
|
+
type: "string"
|
|
732
|
+
},
|
|
733
|
+
providerId: {
|
|
734
|
+
type: "string"
|
|
735
|
+
}
|
|
736
|
+
},
|
|
737
|
+
required: ["keyInfo", "providerId"]
|
|
738
|
+
},
|
|
739
|
+
ResolvedKeyInfo: {
|
|
740
|
+
type: "object",
|
|
741
|
+
properties: {
|
|
742
|
+
kid: {
|
|
743
|
+
type: "string",
|
|
744
|
+
description: "Unique identifier for the cryptographic key. Can be null if the key identifier is not provided."
|
|
745
|
+
},
|
|
746
|
+
key: {
|
|
747
|
+
$ref: "#/components/schemas/Jwk"
|
|
748
|
+
},
|
|
749
|
+
signatureAlgorithm: {
|
|
750
|
+
$ref: "#/components/schemas/SignatureAlgorithm"
|
|
751
|
+
},
|
|
752
|
+
keyVisibility: {
|
|
753
|
+
$ref: "#/components/schemas/KeyVisibility"
|
|
754
|
+
},
|
|
755
|
+
x5c: {
|
|
756
|
+
type: "array",
|
|
757
|
+
items: {
|
|
758
|
+
type: "string"
|
|
1098
759
|
},
|
|
1099
|
-
|
|
1100
|
-
|
|
1101
|
-
|
|
760
|
+
description: "X.509 certificate chain associated with the key."
|
|
761
|
+
},
|
|
762
|
+
alias: {
|
|
763
|
+
type: "string",
|
|
764
|
+
description: "A reference or alias to the key in the Key Management Service (KMS)."
|
|
765
|
+
},
|
|
766
|
+
providerId: {
|
|
767
|
+
type: "string",
|
|
768
|
+
description: "The Key Management System (KMS) identifier associated with the key."
|
|
1102
769
|
},
|
|
1103
|
-
|
|
1104
|
-
|
|
1105
|
-
|
|
1106
|
-
|
|
770
|
+
keyType: {
|
|
771
|
+
$ref: "#/components/schemas/KeyType"
|
|
772
|
+
},
|
|
773
|
+
keyEncoding: {
|
|
774
|
+
$ref: "#/components/schemas/KeyEncoding"
|
|
775
|
+
},
|
|
776
|
+
opts: {
|
|
777
|
+
type: "object",
|
|
778
|
+
additionalProperties: {
|
|
779
|
+
type: "string"
|
|
1107
780
|
},
|
|
1108
|
-
|
|
1109
|
-
|
|
1110
|
-
|
|
781
|
+
description: "Additional configuration options as key-value pairs."
|
|
782
|
+
}
|
|
783
|
+
},
|
|
784
|
+
required: ["key"],
|
|
785
|
+
additionalProperties: false,
|
|
786
|
+
description: "Represents a resolved cryptographic key information where the key is guaranteed to be present and resolved, providing concrete access to the key."
|
|
787
|
+
},
|
|
788
|
+
KmsResolveKeyArgs: {
|
|
789
|
+
type: "object",
|
|
790
|
+
additionalProperties: false,
|
|
791
|
+
properties: {
|
|
792
|
+
keyInfo: {
|
|
793
|
+
$ref: "#/components/schemas/KeyInfo"
|
|
1111
794
|
},
|
|
1112
|
-
|
|
1113
|
-
|
|
1114
|
-
|
|
1115
|
-
|
|
795
|
+
identifierMethod: {
|
|
796
|
+
$ref: "#/components/schemas/IdentifierMethod"
|
|
797
|
+
},
|
|
798
|
+
trustedCerts: {
|
|
799
|
+
type: "array",
|
|
800
|
+
items: {
|
|
801
|
+
type: "string"
|
|
1116
802
|
},
|
|
1117
|
-
|
|
1118
|
-
|
|
1119
|
-
|
|
803
|
+
description: "Optional array of trusted certificates (base64-encoded) that may be used in the resolution process."
|
|
804
|
+
},
|
|
805
|
+
verifyX509CertificateChain: {
|
|
806
|
+
type: "boolean",
|
|
807
|
+
description: "Optional boolean indicating whether the X.509 certificate chain should be verified."
|
|
808
|
+
},
|
|
809
|
+
baseUrl: {
|
|
810
|
+
type: "string"
|
|
811
|
+
},
|
|
812
|
+
resolverId: {
|
|
813
|
+
$ref: "#/components/schemas/String"
|
|
814
|
+
}
|
|
815
|
+
},
|
|
816
|
+
required: ["keyInfo", "resolverId"]
|
|
817
|
+
},
|
|
818
|
+
String: {
|
|
819
|
+
type: "object",
|
|
820
|
+
properties: {
|
|
821
|
+
length: {
|
|
822
|
+
type: "number"
|
|
823
|
+
}
|
|
824
|
+
},
|
|
825
|
+
required: ["length"],
|
|
826
|
+
additionalProperties: {
|
|
827
|
+
type: "string"
|
|
828
|
+
}
|
|
829
|
+
},
|
|
830
|
+
KmsStoreKeyArgs: {
|
|
831
|
+
type: "object",
|
|
832
|
+
additionalProperties: false,
|
|
833
|
+
properties: {
|
|
834
|
+
keyInfo: {
|
|
835
|
+
$ref: "#/components/schemas/ResolvedKeyInfo"
|
|
1120
836
|
},
|
|
1121
|
-
|
|
1122
|
-
|
|
1123
|
-
|
|
1124
|
-
|
|
837
|
+
certChain: {
|
|
838
|
+
type: "array",
|
|
839
|
+
items: {
|
|
840
|
+
type: "string"
|
|
1125
841
|
},
|
|
1126
|
-
|
|
1127
|
-
|
|
1128
|
-
|
|
842
|
+
description: "X.509 certificate chain as base64-encoded DER certificates."
|
|
843
|
+
},
|
|
844
|
+
baseUrl: {
|
|
845
|
+
type: "string"
|
|
1129
846
|
}
|
|
847
|
+
},
|
|
848
|
+
required: ["keyInfo"]
|
|
849
|
+
}
|
|
850
|
+
},
|
|
851
|
+
methods: {
|
|
852
|
+
kmsCreateRawSignature: {
|
|
853
|
+
description: "",
|
|
854
|
+
arguments: {
|
|
855
|
+
$ref: "#/components/schemas/KmsCreateRawSignatureArgs"
|
|
856
|
+
},
|
|
857
|
+
returnType: {
|
|
858
|
+
$ref: "#/components/schemas/CreateRawSignatureResponse"
|
|
859
|
+
}
|
|
860
|
+
},
|
|
861
|
+
kmsDeleteKey: {
|
|
862
|
+
description: "",
|
|
863
|
+
arguments: {
|
|
864
|
+
$ref: "#/components/schemas/KmsDeleteKeyArgs"
|
|
865
|
+
},
|
|
866
|
+
returnType: {
|
|
867
|
+
type: "boolean"
|
|
868
|
+
}
|
|
869
|
+
},
|
|
870
|
+
kmsGenerateKey: {
|
|
871
|
+
description: "",
|
|
872
|
+
arguments: {
|
|
873
|
+
$ref: "#/components/schemas/KmsGenerateKeyArgs"
|
|
874
|
+
},
|
|
875
|
+
returnType: {
|
|
876
|
+
$ref: "#/components/schemas/ManagedKeyPair"
|
|
877
|
+
}
|
|
878
|
+
},
|
|
879
|
+
kmsGetKey: {
|
|
880
|
+
description: "",
|
|
881
|
+
arguments: {
|
|
882
|
+
$ref: "#/components/schemas/KmsGetKeyArgs"
|
|
883
|
+
},
|
|
884
|
+
returnType: {
|
|
885
|
+
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
886
|
+
}
|
|
887
|
+
},
|
|
888
|
+
kmsGetKeyProvider: {
|
|
889
|
+
description: "",
|
|
890
|
+
arguments: {
|
|
891
|
+
$ref: "#/components/schemas/KmsGetKeyProviderArgs"
|
|
892
|
+
},
|
|
893
|
+
returnType: {
|
|
894
|
+
$ref: "#/components/schemas/KeyProviderResponse"
|
|
895
|
+
}
|
|
896
|
+
},
|
|
897
|
+
kmsGetResolver: {
|
|
898
|
+
description: "",
|
|
899
|
+
arguments: {
|
|
900
|
+
$ref: "#/components/schemas/kmsGetResolverArgs"
|
|
901
|
+
},
|
|
902
|
+
returnType: {
|
|
903
|
+
$ref: "#/components/schemas/Resolver"
|
|
904
|
+
}
|
|
905
|
+
},
|
|
906
|
+
kmsIsValidRawSignature: {
|
|
907
|
+
description: "",
|
|
908
|
+
arguments: {
|
|
909
|
+
$ref: "#/components/schemas/KmsIsValidRawSignatureArgs"
|
|
910
|
+
},
|
|
911
|
+
returnType: {
|
|
912
|
+
$ref: "#/components/schemas/VerifyRawSignatureResponse"
|
|
913
|
+
}
|
|
914
|
+
},
|
|
915
|
+
kmsListKeyProviders: {
|
|
916
|
+
description: "",
|
|
917
|
+
arguments: {
|
|
918
|
+
$ref: "#/components/schemas/KmsListKeyProvidersArgs"
|
|
919
|
+
},
|
|
920
|
+
returnType: {
|
|
921
|
+
$ref: "#/components/schemas/ListKeyProvidersResponse"
|
|
922
|
+
}
|
|
923
|
+
},
|
|
924
|
+
kmsListKeys: {
|
|
925
|
+
description: "",
|
|
926
|
+
arguments: {
|
|
927
|
+
$ref: "#/components/schemas/KmsListKeysArgs"
|
|
928
|
+
},
|
|
929
|
+
returnType: {
|
|
930
|
+
$ref: "#/components/schemas/ListKeysResponse"
|
|
931
|
+
}
|
|
932
|
+
},
|
|
933
|
+
kmsListResolvers: {
|
|
934
|
+
description: "",
|
|
935
|
+
arguments: {
|
|
936
|
+
$ref: "#/components/schemas/KmsListResolversArgs"
|
|
937
|
+
},
|
|
938
|
+
returnType: {
|
|
939
|
+
$ref: "#/components/schemas/ListResolversResponse"
|
|
940
|
+
}
|
|
941
|
+
},
|
|
942
|
+
kmsProviderDeleteKey: {
|
|
943
|
+
description: "",
|
|
944
|
+
arguments: {
|
|
945
|
+
$ref: "#/components/schemas/KmsProviderDeleteKeyArgs"
|
|
946
|
+
},
|
|
947
|
+
returnType: {
|
|
948
|
+
type: "boolean"
|
|
949
|
+
}
|
|
950
|
+
},
|
|
951
|
+
kmsProviderGenerateKey: {
|
|
952
|
+
description: "",
|
|
953
|
+
arguments: {
|
|
954
|
+
$ref: "#/components/schemas/KmsProviderGenerateKey"
|
|
955
|
+
},
|
|
956
|
+
returnType: {
|
|
957
|
+
$ref: "#/components/schemas/ManagedKeyPair"
|
|
958
|
+
}
|
|
959
|
+
},
|
|
960
|
+
kmsProviderGetKey: {
|
|
961
|
+
description: "",
|
|
962
|
+
arguments: {
|
|
963
|
+
$ref: "#/components/schemas/KmsProviderGetKeyArgs"
|
|
964
|
+
},
|
|
965
|
+
returnType: {
|
|
966
|
+
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
967
|
+
}
|
|
968
|
+
},
|
|
969
|
+
kmsProviderListKeys: {
|
|
970
|
+
description: "",
|
|
971
|
+
arguments: {
|
|
972
|
+
$ref: "#/components/schemas/KmsProviderListKeysArgs"
|
|
973
|
+
},
|
|
974
|
+
returnType: {
|
|
975
|
+
$ref: "#/components/schemas/ListKeysResponse"
|
|
976
|
+
}
|
|
977
|
+
},
|
|
978
|
+
kmsProviderStoreKey: {
|
|
979
|
+
description: "",
|
|
980
|
+
arguments: {
|
|
981
|
+
$ref: "#/components/schemas/KmsProviderStoreKey"
|
|
982
|
+
},
|
|
983
|
+
returnType: {
|
|
984
|
+
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
985
|
+
}
|
|
986
|
+
},
|
|
987
|
+
kmsResolveKey: {
|
|
988
|
+
description: "",
|
|
989
|
+
arguments: {
|
|
990
|
+
$ref: "#/components/schemas/KmsResolveKeyArgs"
|
|
991
|
+
},
|
|
992
|
+
returnType: {
|
|
993
|
+
$ref: "#/components/schemas/ResolvedKeyInfo"
|
|
994
|
+
}
|
|
995
|
+
},
|
|
996
|
+
kmsStoreKey: {
|
|
997
|
+
description: "",
|
|
998
|
+
arguments: {
|
|
999
|
+
$ref: "#/components/schemas/KmsStoreKeyArgs"
|
|
1000
|
+
},
|
|
1001
|
+
returnType: {
|
|
1002
|
+
$ref: "#/components/schemas/ManagedKeyInfo"
|
|
1130
1003
|
}
|
|
1131
1004
|
}
|
|
1132
1005
|
}
|
|
1133
|
-
}
|
|
1006
|
+
}
|
|
1134
1007
|
}
|
|
1135
|
-
}
|
|
1008
|
+
};
|
|
1136
1009
|
|
|
1137
1010
|
// src/agent/KmsRestClient.ts
|
|
1138
1011
|
import { Loggers } from "@sphereon/ssi-types";
|
|
@@ -1158,16 +1031,16 @@ function CoseKeyFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1158
1031
|
return json;
|
|
1159
1032
|
}
|
|
1160
1033
|
return {
|
|
1161
|
-
|
|
1162
|
-
|
|
1163
|
-
|
|
1164
|
-
|
|
1165
|
-
|
|
1166
|
-
|
|
1167
|
-
|
|
1168
|
-
|
|
1169
|
-
|
|
1170
|
-
|
|
1034
|
+
kty: CoseKeyTypeFromJSON(json["kty"]),
|
|
1035
|
+
kid: json["kid"] == null ? void 0 : json["kid"],
|
|
1036
|
+
alg: json["alg"] == null ? void 0 : json["alg"],
|
|
1037
|
+
keyOps: json["key_ops"] == null ? void 0 : json["key_ops"],
|
|
1038
|
+
baseIV: json["baseIV"] == null ? void 0 : json["baseIV"],
|
|
1039
|
+
crv: json["crv"] == null ? void 0 : json["crv"],
|
|
1040
|
+
x: json["x"] == null ? void 0 : json["x"],
|
|
1041
|
+
y: json["y"] == null ? void 0 : json["y"],
|
|
1042
|
+
d: json["d"] == null ? void 0 : json["d"],
|
|
1043
|
+
x5chain: json["x5chain"] == null ? void 0 : json["x5chain"]
|
|
1171
1044
|
};
|
|
1172
1045
|
}
|
|
1173
1046
|
__name(CoseKeyFromJSONTyped, "CoseKeyFromJSONTyped");
|
|
@@ -1182,8 +1055,8 @@ function CoseKeyPairFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1182
1055
|
return json;
|
|
1183
1056
|
}
|
|
1184
1057
|
return {
|
|
1185
|
-
|
|
1186
|
-
|
|
1058
|
+
privateCoseKey: json["privateCoseKey"] == null ? void 0 : CoseKeyFromJSON(json["privateCoseKey"]),
|
|
1059
|
+
publicCoseKey: CoseKeyFromJSON(json["publicCoseKey"])
|
|
1187
1060
|
};
|
|
1188
1061
|
}
|
|
1189
1062
|
__name(CoseKeyPairFromJSONTyped, "CoseKeyPairFromJSONTyped");
|
|
@@ -1320,27 +1193,27 @@ function JwkFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1320
1193
|
return json;
|
|
1321
1194
|
}
|
|
1322
1195
|
return {
|
|
1323
|
-
|
|
1324
|
-
|
|
1325
|
-
|
|
1326
|
-
|
|
1327
|
-
|
|
1328
|
-
|
|
1329
|
-
|
|
1330
|
-
|
|
1331
|
-
|
|
1332
|
-
|
|
1333
|
-
|
|
1334
|
-
|
|
1335
|
-
|
|
1336
|
-
|
|
1337
|
-
|
|
1338
|
-
|
|
1339
|
-
|
|
1340
|
-
|
|
1341
|
-
|
|
1342
|
-
|
|
1343
|
-
|
|
1196
|
+
kty: JwkKeyTypeFromJSON(json["kty"]),
|
|
1197
|
+
kid: json["kid"] == null ? void 0 : json["kid"],
|
|
1198
|
+
alg: json["alg"] == null ? void 0 : json["alg"],
|
|
1199
|
+
use: json["use"] == null ? void 0 : JwkUseFromJSON(json["use"]),
|
|
1200
|
+
keyOps: json["key_ops"] == null ? void 0 : json["key_ops"].map(KeyOperationsFromJSON),
|
|
1201
|
+
crv: json["crv"] == null ? void 0 : CurveFromJSON(json["crv"]),
|
|
1202
|
+
x: json["x"] == null ? void 0 : json["x"],
|
|
1203
|
+
y: json["y"] == null ? void 0 : json["y"],
|
|
1204
|
+
d: json["d"] == null ? void 0 : json["d"],
|
|
1205
|
+
n: json["n"] == null ? void 0 : json["n"],
|
|
1206
|
+
e: json["e"] == null ? void 0 : json["e"],
|
|
1207
|
+
p: json["p"] == null ? void 0 : json["p"],
|
|
1208
|
+
q: json["q"] == null ? void 0 : json["q"],
|
|
1209
|
+
dp: json["dp"] == null ? void 0 : json["dp"],
|
|
1210
|
+
dq: json["dq"] == null ? void 0 : json["dq"],
|
|
1211
|
+
qi: json["qi"] == null ? void 0 : json["qi"],
|
|
1212
|
+
k: json["k"] == null ? void 0 : json["k"],
|
|
1213
|
+
x5c: json["x5c"] == null ? void 0 : json["x5c"],
|
|
1214
|
+
x5t: json["x5t"] == null ? void 0 : json["x5t"],
|
|
1215
|
+
x5u: json["x5u"] == null ? void 0 : json["x5u"],
|
|
1216
|
+
x5tS256: json["x5t#S256"] == null ? void 0 : json["x5t#S256"]
|
|
1344
1217
|
};
|
|
1345
1218
|
}
|
|
1346
1219
|
__name(JwkFromJSONTyped, "JwkFromJSONTyped");
|
|
@@ -1353,26 +1226,26 @@ function JwkToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1353
1226
|
return value;
|
|
1354
1227
|
}
|
|
1355
1228
|
return {
|
|
1356
|
-
|
|
1357
|
-
|
|
1358
|
-
|
|
1359
|
-
|
|
1360
|
-
|
|
1361
|
-
|
|
1362
|
-
|
|
1363
|
-
|
|
1364
|
-
|
|
1365
|
-
|
|
1366
|
-
|
|
1367
|
-
|
|
1368
|
-
|
|
1369
|
-
|
|
1370
|
-
|
|
1371
|
-
|
|
1372
|
-
|
|
1373
|
-
|
|
1374
|
-
|
|
1375
|
-
|
|
1229
|
+
kty: JwkKeyTypeToJSON(value["kty"]),
|
|
1230
|
+
kid: value["kid"],
|
|
1231
|
+
alg: value["alg"],
|
|
1232
|
+
use: JwkUseToJSON(value["use"]),
|
|
1233
|
+
key_ops: value["keyOps"] == null ? void 0 : value["keyOps"].map(KeyOperationsToJSON),
|
|
1234
|
+
crv: CurveToJSON(value["crv"]),
|
|
1235
|
+
x: value["x"],
|
|
1236
|
+
y: value["y"],
|
|
1237
|
+
d: value["d"],
|
|
1238
|
+
n: value["n"],
|
|
1239
|
+
e: value["e"],
|
|
1240
|
+
p: value["p"],
|
|
1241
|
+
q: value["q"],
|
|
1242
|
+
dp: value["dp"],
|
|
1243
|
+
dq: value["dq"],
|
|
1244
|
+
qi: value["qi"],
|
|
1245
|
+
k: value["k"],
|
|
1246
|
+
x5c: value["x5c"],
|
|
1247
|
+
x5t: value["x5t"],
|
|
1248
|
+
x5u: value["x5u"],
|
|
1376
1249
|
"x5t#S256": value["x5tS256"]
|
|
1377
1250
|
};
|
|
1378
1251
|
}
|
|
@@ -1388,16 +1261,16 @@ function KeyInfoToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1388
1261
|
return value;
|
|
1389
1262
|
}
|
|
1390
1263
|
return {
|
|
1391
|
-
|
|
1392
|
-
|
|
1393
|
-
|
|
1394
|
-
|
|
1395
|
-
|
|
1396
|
-
|
|
1397
|
-
|
|
1398
|
-
|
|
1399
|
-
|
|
1400
|
-
|
|
1264
|
+
kid: value["kid"],
|
|
1265
|
+
key: JwkToJSON(value["key"]),
|
|
1266
|
+
signatureAlgorithm: SignatureAlgorithmToJSON(value["signatureAlgorithm"]),
|
|
1267
|
+
keyVisibility: KeyVisibilityToJSON(value["keyVisibility"]),
|
|
1268
|
+
x5c: value["x5c"],
|
|
1269
|
+
alias: value["alias"],
|
|
1270
|
+
providerId: value["providerId"],
|
|
1271
|
+
keyType: KeyTypeToJSON(value["keyType"]),
|
|
1272
|
+
keyEncoding: KeyEncodingToJSON(value["keyEncoding"]),
|
|
1273
|
+
opts: value["opts"]
|
|
1401
1274
|
};
|
|
1402
1275
|
}
|
|
1403
1276
|
__name(KeyInfoToJSONTyped, "KeyInfoToJSONTyped");
|
|
@@ -1408,8 +1281,8 @@ function CreateRawSignatureToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1408
1281
|
return value;
|
|
1409
1282
|
}
|
|
1410
1283
|
return {
|
|
1411
|
-
|
|
1412
|
-
|
|
1284
|
+
keyInfo: KeyInfoToJSON(value["keyInfo"]),
|
|
1285
|
+
input: value["input"]
|
|
1413
1286
|
};
|
|
1414
1287
|
}
|
|
1415
1288
|
__name(CreateRawSignatureToJSONTyped, "CreateRawSignatureToJSONTyped");
|
|
@@ -1420,7 +1293,7 @@ function CreateRawSignatureResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1420
1293
|
return json;
|
|
1421
1294
|
}
|
|
1422
1295
|
return {
|
|
1423
|
-
|
|
1296
|
+
signature: json["signature"]
|
|
1424
1297
|
};
|
|
1425
1298
|
}
|
|
1426
1299
|
__name(CreateRawSignatureResponseFromJSONTyped, "CreateRawSignatureResponseFromJSONTyped");
|
|
@@ -1431,10 +1304,10 @@ function GenerateKeyToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1431
1304
|
return value;
|
|
1432
1305
|
}
|
|
1433
1306
|
return {
|
|
1434
|
-
|
|
1435
|
-
|
|
1436
|
-
|
|
1437
|
-
|
|
1307
|
+
alias: value["alias"],
|
|
1308
|
+
use: JwkUseToJSON(value["use"]),
|
|
1309
|
+
keyOperations: value["keyOperations"] == null ? void 0 : value["keyOperations"].map(KeyOperationsToJSON),
|
|
1310
|
+
alg: SignatureAlgorithmToJSON(value["alg"])
|
|
1438
1311
|
};
|
|
1439
1312
|
}
|
|
1440
1313
|
__name(GenerateKeyToJSONTyped, "GenerateKeyToJSONTyped");
|
|
@@ -1445,11 +1318,11 @@ function GenerateKeyGlobalToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1445
1318
|
return value;
|
|
1446
1319
|
}
|
|
1447
1320
|
return {
|
|
1448
|
-
|
|
1449
|
-
|
|
1450
|
-
|
|
1451
|
-
|
|
1452
|
-
|
|
1321
|
+
alias: value["alias"],
|
|
1322
|
+
use: JwkUseToJSON(value["use"]),
|
|
1323
|
+
keyOperations: value["keyOperations"] == null ? void 0 : value["keyOperations"].map(KeyOperationsToJSON),
|
|
1324
|
+
alg: SignatureAlgorithmToJSON(value["alg"]),
|
|
1325
|
+
providerId: value["providerId"]
|
|
1453
1326
|
};
|
|
1454
1327
|
}
|
|
1455
1328
|
__name(GenerateKeyGlobalToJSONTyped, "GenerateKeyGlobalToJSONTyped");
|
|
@@ -1464,8 +1337,8 @@ function JoseKeyPairFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1464
1337
|
return json;
|
|
1465
1338
|
}
|
|
1466
1339
|
return {
|
|
1467
|
-
|
|
1468
|
-
|
|
1340
|
+
privateJwk: json["privateJwk"] == null ? void 0 : JwkFromJSON(json["privateJwk"]),
|
|
1341
|
+
publicJwk: JwkFromJSON(json["publicJwk"])
|
|
1469
1342
|
};
|
|
1470
1343
|
}
|
|
1471
1344
|
__name(JoseKeyPairFromJSONTyped, "JoseKeyPairFromJSONTyped");
|
|
@@ -1476,11 +1349,11 @@ function ManagedKeyPairFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1476
1349
|
return json;
|
|
1477
1350
|
}
|
|
1478
1351
|
return {
|
|
1479
|
-
|
|
1480
|
-
|
|
1481
|
-
|
|
1482
|
-
|
|
1483
|
-
|
|
1352
|
+
kid: json["kid"] == null ? void 0 : json["kid"],
|
|
1353
|
+
providerId: json["providerId"],
|
|
1354
|
+
alias: json["alias"],
|
|
1355
|
+
cose: CoseKeyPairFromJSON(json["cose"]),
|
|
1356
|
+
jose: JoseKeyPairFromJSON(json["jose"])
|
|
1484
1357
|
};
|
|
1485
1358
|
}
|
|
1486
1359
|
__name(ManagedKeyPairFromJSONTyped, "ManagedKeyPairFromJSONTyped");
|
|
@@ -1495,16 +1368,16 @@ function ManagedKeyInfoFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1495
1368
|
return json;
|
|
1496
1369
|
}
|
|
1497
1370
|
return {
|
|
1498
|
-
|
|
1499
|
-
|
|
1500
|
-
|
|
1501
|
-
|
|
1502
|
-
|
|
1503
|
-
|
|
1504
|
-
|
|
1505
|
-
|
|
1506
|
-
|
|
1507
|
-
|
|
1371
|
+
kid: json["kid"] == null ? void 0 : json["kid"],
|
|
1372
|
+
key: JwkFromJSON(json["key"]),
|
|
1373
|
+
signatureAlgorithm: json["signatureAlgorithm"] == null ? void 0 : SignatureAlgorithmFromJSON(json["signatureAlgorithm"]),
|
|
1374
|
+
keyVisibility: json["keyVisibility"] == null ? void 0 : KeyVisibilityFromJSON(json["keyVisibility"]),
|
|
1375
|
+
x5c: json["x5c"] == null ? void 0 : json["x5c"],
|
|
1376
|
+
alias: json["alias"],
|
|
1377
|
+
providerId: json["providerId"],
|
|
1378
|
+
keyType: json["keyType"] == null ? void 0 : KeyTypeFromJSON(json["keyType"]),
|
|
1379
|
+
keyEncoding: json["keyEncoding"] == null ? void 0 : KeyEncodingFromJSON(json["keyEncoding"]),
|
|
1380
|
+
opts: json["opts"] == null ? void 0 : json["opts"]
|
|
1508
1381
|
};
|
|
1509
1382
|
}
|
|
1510
1383
|
__name(ManagedKeyInfoFromJSONTyped, "ManagedKeyInfoFromJSONTyped");
|
|
@@ -1533,8 +1406,8 @@ function KeyProviderFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1533
1406
|
return json;
|
|
1534
1407
|
}
|
|
1535
1408
|
return {
|
|
1536
|
-
|
|
1537
|
-
|
|
1409
|
+
providerId: json["providerId"],
|
|
1410
|
+
type: KeyProviderTypeFromJSON(json["type"])
|
|
1538
1411
|
};
|
|
1539
1412
|
}
|
|
1540
1413
|
__name(KeyProviderFromJSONTyped, "KeyProviderFromJSONTyped");
|
|
@@ -1545,8 +1418,8 @@ function KeyProviderResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1545
1418
|
return json;
|
|
1546
1419
|
}
|
|
1547
1420
|
return {
|
|
1548
|
-
|
|
1549
|
-
|
|
1421
|
+
providerId: json["providerId"],
|
|
1422
|
+
type: KeyProviderTypeFromJSON(json["type"])
|
|
1550
1423
|
};
|
|
1551
1424
|
}
|
|
1552
1425
|
__name(KeyProviderResponseFromJSONTyped, "KeyProviderResponseFromJSONTyped");
|
|
@@ -1557,7 +1430,7 @@ function ListKeyProvidersResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1557
1430
|
return json;
|
|
1558
1431
|
}
|
|
1559
1432
|
return {
|
|
1560
|
-
|
|
1433
|
+
providers: json["providers"].map(KeyProviderFromJSON)
|
|
1561
1434
|
};
|
|
1562
1435
|
}
|
|
1563
1436
|
__name(ListKeyProvidersResponseFromJSONTyped, "ListKeyProvidersResponseFromJSONTyped");
|
|
@@ -1568,7 +1441,7 @@ function ListKeysResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1568
1441
|
return json;
|
|
1569
1442
|
}
|
|
1570
1443
|
return {
|
|
1571
|
-
|
|
1444
|
+
keyInfos: json["keyInfos"].map(ManagedKeyInfoFromJSON)
|
|
1572
1445
|
};
|
|
1573
1446
|
}
|
|
1574
1447
|
__name(ListKeysResponseFromJSONTyped, "ListKeysResponseFromJSONTyped");
|
|
@@ -1583,9 +1456,9 @@ function ResolverFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1583
1456
|
return json;
|
|
1584
1457
|
}
|
|
1585
1458
|
return {
|
|
1586
|
-
|
|
1587
|
-
|
|
1588
|
-
|
|
1459
|
+
resolverId: json["resolverId"],
|
|
1460
|
+
supportedIdentifierMethods: json["supportedIdentifierMethods"] == null ? void 0 : json["supportedIdentifierMethods"].map(IdentifierMethodFromJSON),
|
|
1461
|
+
supportedKeyTypes: json["supportedKeyTypes"] == null ? void 0 : json["supportedKeyTypes"].map(KeyTypeFromJSON)
|
|
1589
1462
|
};
|
|
1590
1463
|
}
|
|
1591
1464
|
__name(ResolverFromJSONTyped, "ResolverFromJSONTyped");
|
|
@@ -1596,7 +1469,7 @@ function ListResolversResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1596
1469
|
return json;
|
|
1597
1470
|
}
|
|
1598
1471
|
return {
|
|
1599
|
-
|
|
1472
|
+
resolvers: json["resolvers"].map(ResolverFromJSON)
|
|
1600
1473
|
};
|
|
1601
1474
|
}
|
|
1602
1475
|
__name(ListResolversResponseFromJSONTyped, "ListResolversResponseFromJSONTyped");
|
|
@@ -1607,10 +1480,10 @@ function ResolvePublicKeyToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1607
1480
|
return value;
|
|
1608
1481
|
}
|
|
1609
1482
|
return {
|
|
1610
|
-
|
|
1611
|
-
|
|
1612
|
-
|
|
1613
|
-
|
|
1483
|
+
keyInfo: KeyInfoToJSON(value["keyInfo"]),
|
|
1484
|
+
identifierMethod: IdentifierMethodToJSON(value["identifierMethod"]),
|
|
1485
|
+
trustedCerts: value["trustedCerts"],
|
|
1486
|
+
verifyX509CertificateChain: value["verifyX509CertificateChain"]
|
|
1614
1487
|
};
|
|
1615
1488
|
}
|
|
1616
1489
|
__name(ResolvePublicKeyToJSONTyped, "ResolvePublicKeyToJSONTyped");
|
|
@@ -1621,16 +1494,16 @@ function ResolvedKeyInfoFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1621
1494
|
return json;
|
|
1622
1495
|
}
|
|
1623
1496
|
return {
|
|
1624
|
-
|
|
1625
|
-
|
|
1626
|
-
|
|
1627
|
-
|
|
1628
|
-
|
|
1629
|
-
|
|
1630
|
-
|
|
1631
|
-
|
|
1632
|
-
|
|
1633
|
-
|
|
1497
|
+
kid: json["kid"] == null ? void 0 : json["kid"],
|
|
1498
|
+
key: JwkFromJSON(json["key"]),
|
|
1499
|
+
signatureAlgorithm: json["signatureAlgorithm"] == null ? void 0 : SignatureAlgorithmFromJSON(json["signatureAlgorithm"]),
|
|
1500
|
+
keyVisibility: json["keyVisibility"] == null ? void 0 : KeyVisibilityFromJSON(json["keyVisibility"]),
|
|
1501
|
+
x5c: json["x5c"] == null ? void 0 : json["x5c"],
|
|
1502
|
+
alias: json["alias"] == null ? void 0 : json["alias"],
|
|
1503
|
+
providerId: json["providerId"] == null ? void 0 : json["providerId"],
|
|
1504
|
+
keyType: json["keyType"] == null ? void 0 : KeyTypeFromJSON(json["keyType"]),
|
|
1505
|
+
keyEncoding: json["keyEncoding"] == null ? void 0 : KeyEncodingFromJSON(json["keyEncoding"]),
|
|
1506
|
+
opts: json["opts"] == null ? void 0 : json["opts"]
|
|
1634
1507
|
};
|
|
1635
1508
|
}
|
|
1636
1509
|
__name(ResolvedKeyInfoFromJSONTyped, "ResolvedKeyInfoFromJSONTyped");
|
|
@@ -1643,16 +1516,16 @@ function ResolvedKeyInfoToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1643
1516
|
return value;
|
|
1644
1517
|
}
|
|
1645
1518
|
return {
|
|
1646
|
-
|
|
1647
|
-
|
|
1648
|
-
|
|
1649
|
-
|
|
1650
|
-
|
|
1651
|
-
|
|
1652
|
-
|
|
1653
|
-
|
|
1654
|
-
|
|
1655
|
-
|
|
1519
|
+
kid: value["kid"],
|
|
1520
|
+
key: JwkToJSON(value["key"]),
|
|
1521
|
+
signatureAlgorithm: SignatureAlgorithmToJSON(value["signatureAlgorithm"]),
|
|
1522
|
+
keyVisibility: KeyVisibilityToJSON(value["keyVisibility"]),
|
|
1523
|
+
x5c: value["x5c"],
|
|
1524
|
+
alias: value["alias"],
|
|
1525
|
+
providerId: value["providerId"],
|
|
1526
|
+
keyType: KeyTypeToJSON(value["keyType"]),
|
|
1527
|
+
keyEncoding: KeyEncodingToJSON(value["keyEncoding"]),
|
|
1528
|
+
opts: value["opts"]
|
|
1656
1529
|
};
|
|
1657
1530
|
}
|
|
1658
1531
|
__name(ResolvedKeyInfoToJSONTyped, "ResolvedKeyInfoToJSONTyped");
|
|
@@ -1663,8 +1536,8 @@ function StoreKeyToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1663
1536
|
return value;
|
|
1664
1537
|
}
|
|
1665
1538
|
return {
|
|
1666
|
-
|
|
1667
|
-
|
|
1539
|
+
keyInfo: ResolvedKeyInfoToJSON(value["keyInfo"]),
|
|
1540
|
+
certChain: value["certChain"]
|
|
1668
1541
|
};
|
|
1669
1542
|
}
|
|
1670
1543
|
__name(StoreKeyToJSONTyped, "StoreKeyToJSONTyped");
|
|
@@ -1675,9 +1548,9 @@ function VerifyRawSignatureToJSONTyped(value, ignoreDiscriminator = false) {
|
|
|
1675
1548
|
return value;
|
|
1676
1549
|
}
|
|
1677
1550
|
return {
|
|
1678
|
-
|
|
1679
|
-
|
|
1680
|
-
|
|
1551
|
+
keyInfo: KeyInfoToJSON(value["keyInfo"]),
|
|
1552
|
+
input: value["input"],
|
|
1553
|
+
signature: value["signature"]
|
|
1681
1554
|
};
|
|
1682
1555
|
}
|
|
1683
1556
|
__name(VerifyRawSignatureToJSONTyped, "VerifyRawSignatureToJSONTyped");
|
|
@@ -1688,7 +1561,7 @@ function VerifyRawSignatureResponseFromJSONTyped(json, ignoreDiscriminator) {
|
|
|
1688
1561
|
return json;
|
|
1689
1562
|
}
|
|
1690
1563
|
return {
|
|
1691
|
-
|
|
1564
|
+
isValid: json["isValid"]
|
|
1692
1565
|
};
|
|
1693
1566
|
}
|
|
1694
1567
|
__name(VerifyRawSignatureResponseFromJSONTyped, "VerifyRawSignatureResponseFromJSONTyped");
|
|
@@ -2053,11 +1926,8 @@ var KmsRestClient = class _KmsRestClient {
|
|
|
2053
1926
|
return url;
|
|
2054
1927
|
}
|
|
2055
1928
|
};
|
|
2056
|
-
|
|
2057
|
-
// src/index.ts
|
|
2058
|
-
var schema = require_plugin_schema();
|
|
2059
1929
|
export {
|
|
2060
1930
|
KmsRestClient,
|
|
2061
|
-
schema
|
|
1931
|
+
plugin_schema_default as schema
|
|
2062
1932
|
};
|
|
2063
1933
|
//# sourceMappingURL=index.js.map
|