Logs relating to the digest API route

The fields described below belong to logs about the digest API route. Such routes make it possible to check whether the migration to another KACLS was successful.

Field

Description

Type

Examples

api_route

URL slug of the API route.

String

"/api/v1/{tenantId}/digest"

user_agent

User agent used in the request.

String

"Chrome/27.0.1453.110"

source_address

Network traffic source (client requesting the connection).

String

"172.16.16.212"

http_status

HTTP response code that indicates the status of the request to the proxy.

Integer

Prescribed values: "200", "400","401", "405", "413", "415", "500"

request_payload

Data relating to the HTTP request.

Object


    reason

JSON string providing additional context about the operation. 

String

"{client:’drive’ op:’update’}"

    authorization_token

JWT attesting that the user is allowed to wrap a key for ‘resource_name’.

It contains the information below:

Object


 

email: e-mail address of the user that the authorization token concerns.

String

"alice@domain.eu"

 

role: role requested in the authorization token.

String

Prescribed value:

"check"

 

resource_name: resource identifier.

String

"6Bhds6BhdRkqt3Rkqt36Bhd"

 

kacls_url: URL of the KACLS.

String

"https://someserver.eu"

       

iss: identifies the service that generates the JWT (issuer).

String

"www.google.com"

 

aud: identifies the recipient of the JWT (audience).

String array

"s6BhdRkqt3"

 

exp: identifies the expiry time after which the JWT must no longer be accepted.

Integer (timestamp in seconds)

"1694617320"

 

iat: identifies the date on which the JWT was created (issued at).

Integer (timestamp in seconds)

"1694617320"

additional_data

Additional data.
It contains the information below:

Object


   

wrap_properties: data relating to the wrap operation.

Object


 

kek_id: identifier of the KEK used.

String

"bbc9cd0b-803c-4d9c-93f9-b43bdfc0bf96"

        

version: version of the wrap operation.

Integer

1

       

mode: mode used for the wrap operation.

  • persistence: persistence mode used

Object

String

Prescribed values:

 

 

"json_file"

        

cse_version: version of the service during the wrap operation.

String

"1.0.23458"

  authentication_mode: authentication mode used for the wrap operation.

String

"local-configuration", "admin-configuration", "cse-configuration"
  authentication_domain: domain used for authentication.

String

"domain.com"