Logs relating to the rewrap API route
The fields described below belong to logs about the rewrap API route. Such routes make it possible to migrate from one KACLS to another.
|
Field |
Description |
Type |
Examples |
|---|---|---|---|
|
api_route |
URL slug of the API route. |
String |
"/api/v1/{tenantId}/rewrap" |
|
user_agent |
User agent used in the request. |
String |
"Chrome/27.0.1453.110" |
|
source_address |
Network traffic source (client requesting the connection). |
String |
"172.16.16.212" |
|
http_status |
HTTP response code that indicates the status of the request to the proxy. |
Integer |
Prescribed values: "200", "400", "401", "405", "413", "415", "500" |
|
request_payload |
Data relating to the HTTP request. |
Object |
|
|
reason |
JSON string providing additional context about the operation. |
String |
"{client:’drive’ op:’update’}" |
|
authorization_token |
JWT guaranteeing that the user is allowed to wrap a key for ‘resource_name’. It contains the information below: |
Object |
|
|
|
email: e-mail address of the user that the authorization token concerns. |
String |
"alice@domain.eu" |
|
|
role: role requested in the authorization token. |
String |
Prescribed value: "migrator" |
|
|
resource_name: resource identifier. |
String |
"6Bhds6BhdRkqt3Rkqt36Bhd" |
|
|
kacls_url: URL of the KACLS. |
String |
"https://someserver.eu" |
|
|
iss: identifies the service that generates the JWT (issuer). |
String |
"www.google.com" |
|
|
aud: identifies the recipient of the JWT (audience). |
String array |
"s6BhdRkqt3" |
|
|
exp: identifies the expiry time after which the JWT must no longer be accepted. |
Integer (timestamp in seconds) |
"1694617320" |
|
|
iat: identifies the date on which the JWT was created (issued at). |
Integer (timestamp in seconds) |
"1694617320" |
|
authentication_token |
JWT generated by a third-party tool that guarantees the user’s identity. It contains the information below: |
Object |
|
|
|
claims: standard user data provided by the IDP.
|
String
String String array Integer (timestamp in seconds) Integer (timestamp in seconds) |
"username@domain.eu"
"www.onelogin.com"
"s6BhdRkqt3"
"1694617320"
"1694617320" |
|
number_of_custom_claims: number of custom claims included in the authentication token. |
Integer |
2 |
|
|
additional_data |
Additional data. |
Object |
|
|
|
wrap_properties: data relating to the wrap operation. |
Object |
|
|
|
kek_id: identifier of the KEK used. |
String |
"bbc9cd0b-803c-4d9c-93f9-b43bdfc0bf96" |
|
|
version: Version of the wrap operation. |
Integer |
1 |
|
|
mode: Mode used for the wrap operation.
|
Object String |
"json_file" |
|
|
cse_version: version of the service during the wrap operation. |
String |
"1.0.23458" |
| authentication_mode: authentication mode used for the wrap operation. |
String |
"local-configuration", "admin-configuration", "cse-configuration" | |
| authentication_domain: domain used for authentication. |
String |
"domain.com" |