Logs relating to the wrap API route

api_route

URL slug of the API route.

String

user_agent

User agent used in the request.

String

source_address

Network traffic source (client requesting the connection).

String

http_status

HTTP response code that indicates the status of the request to the proxy.

Integer

request_payload

Data relating to the HTTP request.

Object

  reason

JSON string providing additional context about the operation. 

String

    authorization_token

JWT guaranteeing that the user is allowed to wrap a key for ‘resource_name’.

It contains the information below:

Object

email: e-mail address of the user that the authorization token concerns.

String

email_type: Origin of the user's email address.

• google: Google accounts (default value),

• google-visitor: account verified by Google,

• customer-idp: IDP account.

String

role: role requested in the authorization token.

Prescribed value: "writer"

String

resource_name: resource identifier.

String

perimeter_id: identifier to conduct verifications of authentication and authorization requests.

String

kacls_url: URL of the KACLS.

String

iss: identifies the service that generates the JWT (issuer).

String

aud: identifies the recipient of the JWT (audience).

String array

exp: identifies the expiry time after which the JWT must no longer be accepted.

Integer (timestamp in seconds)

iat: identifies the date on which the JWT was created (issued at).

Integer (timestamp in seconds)

authentication_token

JWT generated by a third-party tool that guarantees the user’s identity.

It contains the information below:

Object

claims: standard user data provided by the IDP.

• email: e-mail address of the user that the authentication token concerns.

• google_email: email address of the Google account of the user that the authentication token concerns.

• iss: identifies the service that generates the JWT (issuer).

• aud: identifies the recipient of the JWT (audience).

• exp: identifies the expiry time after which the JWT must no longer be accepted.

• iat: identifies the date on which the JWT was created (issued at).

String

String

String array

Integer (timestamp in seconds)

Integer (timestamp in seconds)

number_of_custom_claims: number of custom claims included in the authentication token.

Integer

additional_data

Additional data.
It contains the information below:

Object

wrap_properties: data relating to the wrap operation.

Object

kek_id: identifier of the KEK used.

String

version: Version of the wrap operation.

Integer

mode: Mode used for the wrap operation.

• persistence: Persistence mode used

Object

String

cse_version: version of the service during the wrap operation.

String

String