Inputs specific to the wrapprivatekey and privilegedprivatekeydecrypt API routes

Input

Description

 Source of the input
authentication.email

User's email address.
In UTF8 format, in lower case.

 JWT authentication token provided by the IDP.
authentication.googleEmail

Optional if the email field is not a Google Workspace address belonging to the domain, googleEmail is the user's email address. It takes priority over the email field.
In UTF8 format, in lower case.

 JWT authentication token provided by the IDP.
authentication.iss

Entity which has created and signed the token.

 JWT authentication token provided by the IDP.
authentication.aud

Corresponds to the audience for which the token was issued.

Example: [ 'cse-authorization', 'cse-authorization1' ]

 JWT authentication token provided by the IDP.
authentication.iat

Date when the token was issued. In timestamp format (integer)

Example: 1677679386

 JWT authentication token provided by the IDP.
authentication.exp

Date when the token expires.

In timestamp format (integer)

Example: 1677679386

 JWT authentication token provided by the IDP.
authentication.customClaims

Optional.

Custom claims provided par the IDP.

SeeInputs specific to the wrapprivatekey and privilegedprivatekeydecrypt API routes.

 JWT authentication token provided by the IDP.
contentType

Cryptographic content type.

Prescribed values: "private-key-pem" or "private-key-name"

 Cryptographic component configured.